Theme Demo Import Security Vulnerabilities and Issues — Theme Demo Import CVE List

ThemelyTheme Demo Import

2 matches found

CVE•added 2023/12/20 7:12 p.m.•62 views

CVE-2023-28170

CVE-2023-28170 affects WordPress Theme Demo Import plugin (theme-demo-import)

9.1CVSS7.5AI score0.00632EPSS

Save

CVE•added 2024/01/16 3:50 p.m.•56 views

CVE-2022-1538

The connected data confirms CVE-2022-1538 affects the WordPress Theme Demo Importer plugin prior to 1.1.1. The root cause is a lack of validation of imported files, enabling high-privilege users (e.g., admin) to upload arbitrary files such as PHP even when FILE_MODS and FILE_EDIT are disallowed. ...

7.2CVSS7AI score0.012EPSS

Save