Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: deveasel Clear all filters
TI-2026-12635 CVE-2026-15012 · GHSA-4p37-mx5p-f6gr

Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy

Priority LOW 31

The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handle_restore_step function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00551 Published 2026-07-28 No fix listed CWE-200