CVE-2022-1008

The CVE-2022-1008 entry concerns the WordPress plugin One Click Demo Import (up to version 3.0.x; fixed in 3.1.0) where imported files are not validated. This enables high-privilege users (e.g., admin) to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed. Multi...

CVE-2024-34433

CVE-2024-34433 is a PHP Object Injection/deserialization vulnerability in the One Click Demo Import plugin for WordPress (versions