Plugin icon

Advanced Import

advanced-import

Vulnerabilities:

2

Last Updated:

June 9, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2026-06-18
Title
Advanced Import: One-Click Demo Import for WordPress < 2.0.0 - Authenticated (Author+) Server-Side Request Forgery via 'demo_file' Parameter
Fixed in
Fixed in 2.0.0
CVSS
5.5 (medium)
Published
2022-11-14
Title
Advanced Import < 1.3.8 - Arbitrary Plugin Installation & Activation via CSRF
Fixed in
Fixed in 1.3.8
CVSS
7.6 (high)