demo-importer-plus
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Demo Importer Plus <= 2.0.9 - Authenticated (Author+) Blind XML External Entity Injection via SVG File Upload | demo-importer-plus | WordPress | High | Fix reported | |
| Demo Importer Plus <= 2.0.8 - Missing Authorization | demo-importer-plus | WordPress | Medium | Fix reported | |
| Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation | demo-importer-plus | WordPress | High | Fix reported | |
| Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass | demo-importer-plus | WordPress | High | Fix reported | |
| Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload | demo-importer-plus | WordPress | Medium | Fix reported |