Demi – One Click Demo Import, Backup & Site Migration vulnerabilities
1 known vulnerability in Demi – One Click Demo Import, Backup & Site Migration from Deveasel. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Demi – One Click Demo Import, Backup & Site…: Improper Limitation of a Pathname to a Restricted Directory
The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 0.0.7. The vulnerability exists because the plugin stores its HMAC signing key and per-step re