plugin
5 known security issues reported for the Theme Demo Import WordPress plugin. Most recent disclosed Jul 17, 2026.
Running Theme Demo Import on your site? Check whether your installed version is affected.
Scan your site freeThe Theme Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.1.3. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which...
[en] Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.
[en] Unrestricted Upload of File with Dangerous Type vulnerability in Themely Theme Demo Import.This issue affects Theme Demo Import: from n/a through 1.1.1.
The Theme Demo Import plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.1.3. This makes it possible for authenticated attackers with administrator privileges to upload arbitrary files on the affected site's server which may make remote code execution possible.
The Theme Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the ~/upload.php file in versions up to, and including, 1.1.3. This makes it possible for authenticated attackers, with administrator-level permissions and above, to upload arbitrary files on the a...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free