Themegrill Demo Importer Vulnerabilities

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.0.0.6. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 2.0.0.6

Fixed in:

2.0.0.7

Disclosed:

Mar 6, 2026

CVE-2026-40730 on NVD →

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset_wizard_actions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there is a user named 'admi...

CVSS:

9.9

Affected:

1.3.4 – 1.6.1

Fixed in:

1.6.2

Disclosed:

Feb 16, 2020

CVE-2020-36837 on NVD →