plugin

Sparkle Demo Importer Vulnerabilities

2 known security issues reported for the Sparkle Demo Importer WordPress plugin. Most recent disclosed Jun 21, 2024.

2 medium

Running Sparkle Demo Importer on your site? Check whether your installed version is affected.

Scan your site free

Sparkle Demo Importer <= 1.4.7 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import

medium

The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multiple functions in all versions up to and including 1.4.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete al...

CVSS:
6.5
Affected:
up to 1.4.7
Fixed in:
1.4.8
Disclosed:
Jun 21, 2024

CVE-2024-6120 on NVD →

Sparkle Demo Importer < 1.4.8 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import

medium
Affected:
up to 1.4.8
Fixed in:
1.4.8
Disclosed:
Jun 21, 2024

CVE-2024-6120 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database