Theme Demo Import vulnerabilities

2 known vulnerabilities in Theme Demo Import from Theme Demo Import. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Theme Demo Import: Unrestricted Upload of File with Dangerous Type

  CVE-2026-13157Aug 1, 2026Theme Demo Import

  The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowing high-privilege users (Administrator by default, including non-super-admin site administr

• 7.2 High severity

  Theme Demo Import: Unrestricted Upload of File with Dangerous Type

  CVE-2022-1538Jan 16, 2024Theme Demo ImportEPSS 1.2%

  Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.