deveasel

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

deveasel records in CISA KEV

No deveasel vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-12243 CVE-2026-14490 · GHSA-8mj8-7gxm-p63p

Demi <= 0.0.6 - Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action

MEDIUM 40

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 0.0.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00757 Published 2026-07-28 No fix listed CWE-22

TI-2026-12635 CVE-2026-15012 · GHSA-4p37-mx5p-f6gr

Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy

LOW 31

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handle_restore_step function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00551 Published 2026-07-28 No fix listed CWE-200

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0