Skip to content
OpenAdvisories

Vendor

deveasel

2 known vulnerabilities.

Products

Demi – One Click Demo Import, Backup & Site Migration 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-15012

    Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy

    The Demi – One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Copy in all versions up to, and including, 0.0.8 via the handle_restore_step function. This is due to missing HTTP access controls on the wp…

    deveasel Demi – One Click Demo Import, Backup & Site Migration Web / CMS