One Click Demo Import Security Vulnerabilities and Issues — One Click Demo Import CVE List

OcdiOne Click Demo Import

2 matches found

CVE•added 2022/04/11 2:41 p.m.•111 views

CVE-2022-1008

The CVE-2022-1008 entry concerns the WordPress plugin One Click Demo Import (up to version 3.0.x; fixed in 3.1.0) where imported files are not validated. This enables high-privilege users (e.g., admin) to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed. Multi...

7.2CVSS6.9AI score0.01653EPSS

Save

CVE•added 2024/05/09 12:00 p.m.•94 views

CVE-2024-34433

CVE-2024-34433 is a PHP Object Injection/deserialization vulnerability in the One Click Demo Import plugin for WordPress (versions

7.2CVSS5.2AI score0.00499EPSS

Save