CVE-2020-36333

The themegrill-demo-importer WordPress plugin versions prior to 1.6.2 (specifically versions 1.3.4 and above and versions 1.6.1 and below) contain an access control vulnerability. Due to a reset_wizard_actions hook that lacks authentication requirements, unauthenticated attackers can wipe the ent...

CVE-2020-36334

The CVE affects the WordPress plugin themegrill-demo-importer, with versions before 1.6.3. The vulnerability is cross-site request forgery (CSRF) in the plugin, demonstrated by the ability to wipe the database. Root cause details are not explicitly provided beyond the CSRF issue. Impact, as state...