Vulnerabilities

TI-2024-22768 CVE-2024-34433 · GHSA-rc7p-84r6-38c5

WordPress One Click Demo Import plugin <=3.2.0 - PHP Object Injection vulnerability

LOW 32

Deserialization of Untrusted Data vulnerability in OCDI One Click Demo Import.This issue affects One Click Demo Import: from n/a through 3.2.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00495 Published 2024-05-09 No fix listed CWE-502

TI-2022-00907 CVE-2022-1008 · GHSA-qqj4-453q-5665

One Click Demo Import < 3.1.0 - Admin+ Arbitrary File Upload

LOW 35

The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disal…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01679 Published 2022-04-11 Fixed in 3.1.0 CWE-434

Vulnerabilities

Filters

WordPress One Click Demo Import plugin <=3.2.0 - PHP Object Injection vulnerability

One Click Demo Import < 3.1.0 - Admin+ Arbitrary File Upload