WordPress Access Control Error Vulnerability

WordPress is the WordPress (Wordpress) Foundation’s suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress Plugin Hashthemes Demo Importer 1.1.1 and earlier is vulnerable to an access control error, which stems from the fact that the affected product contains several AJAX functions that rely on a random number visible to all logged-in users for Access control, an attacker can use the vulnerability to execute a function that truncates almost all database tables and delete content wp content/upload.