Kraftplugins Demo Importer Plus
4 CVEs affecting Kraftplugins Demo Importer Plus. Latest disclosed: 2026-01-17. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-14364 | High | 8.8 | 2025-12-18 | The Demo Importer Plus plugin for WordPress is vulnerable to unauthorized modification of data, loss of data, and privilege escalation due to a missing capabil… |
CVE-2025-13066 | High | 8.8 | 2025-12-05 | The Demo Importer Plus plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 2.0.6. This is due to insufficient fil… |
CVE-2025-14478 | High | 7.5 | 2026-01-17 | The Demo Importer Plus plugin for WordPress is vulnerable to XML External Entity Injection (XXE) in all versions up to, and including, 2.0.9 via the SVG file u… |
CVE-2024-9172 | Medium | 6.4 | 2024-10-02 | The Demo Importer Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0.1 due t… |