plugin
2 known security issues reported for the One Click Demo Import WordPress plugin. Most recent disclosed May 7, 2024.
Running One Click Demo Import on your site? Check whether your installed version is affected.
Scan your site freeThe One Click Demo Import plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.0 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in...
The Catch Themes Demo Import plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 3.0.2. This is due to insufficient file type validation on imported files that makes it possible for high-level authenticated users, such as administrators, to upload arbitrary files onto a vulner...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free