Theme Demo Import vulnerabilities
We track 2 vulnerabilities in Theme Demo Import products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest Theme Demo Import vulnerabilities
- 7.2 High severity
Theme Demo Import: Unrestricted Upload of File with Dangerous Type
The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowing high-privilege users (Administrator by default, including non-super-admin site administr
- 7.2 High severity
Theme Demo Import: Unrestricted Upload of File with Dangerous Type
Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.