TI-2024-05671 CVE-2024-6120 · GHSA-gjp6-cpfp-vxjmMissing authorization in sparklewpthemes Sparkle Demo ImporterPriority LOW 29The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multiple functions in all versions up to and including 1.4.7.CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00503 · Published 2024-06-21 · No fix listed CWE-862