Plugin icon

Demo Importer Plus

demo-importer-plus

Vulnerabilities:

5

Last Updated:

May 4, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-01-16
Title
Demo Importer Plus < 2.0.10 - Authenticated (Author+) Blind XML External Entity Injection via SVG File Upload
Fixed in
Fixed in 2.0.10
CVSS
7.5 (high)
Published
2026-01-05
Title
Demo Importer Plus < 2.0.9 - Missing Authorization
Fixed in
Fixed in 2.0.9
CVSS
4.3 (medium)
Published
2025-12-17
Title
Demo Importer Plus < 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation
Fixed in
Fixed in 2.0.9
CVSS
8.8 (high)
Published
2025-12-04
Title
Demo Importer Plus < 2.0.7 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass
Fixed in
Fixed in 2.0.7
CVSS
8.8 (high)
Published
2024-10-01
Title
Demo Importer Plus < 2.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 2.0.2
CVSS
6.4 (medium)