Skip to content
OpenAdvisories

Vendor

kraftplugins

9 known vulnerabilities.

Products

Demo Importer Plus 4 Mega Elements – Addons for Elementor 2 Mega Elements 2 Wheel of Life: Coaching and Assessment Tool for Life Coach 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-14364 Public exploit

    Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation

    The Demo Importer Plus plugin for WordPress is vulnerable to unauthorized modification of data, loss of data, and privilege escalation due to a missing capability check on the Ajax::handle_request() function in all versions up to, and including, 2.0.8. This m…

    kraftplugins Demo Importer Plus Web / CMS