CVE-2024-2702: Olivethemes Olive One Click Demo Import

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

Affected products

• Olivethemes Olive One Click Demo Import: before 1.1.2 (fixed in 1.1.2)

Published 2024-03-20. Last modified 2026-06-17.