Skip to content
OpenAdvisories

Vendor

deveasel

2 known vulnerabilities.

Products

Demi – One Click Demo Import, Backup & Site Migration 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-14490

    Demi <= 0.0.6 - Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action

    The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 0.0.7. The vulnerability exists because the plugin stores its HMAC signing key and per-step r…

    deveasel Demi – One Click Demo Import, Backup & Site Migration Web / CMS