Skip to content
OpenAdvisories

Vendor

themeinwp

5 known vulnerabilities.

Products

Default Mag 1 Booster Extension 1 Demo Import Kit 1 Social Share With Floating Bar 1 NewsXpress 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-10051

    Demo Import Kit <= 1.1.0 - Authenticated (Admin+) Arbitrary File Upload

    The Demo Import Kit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.1.0 via the import functionality. This makes it possible for authenticated attackers, with Administrat…

    themeinwp Demo Import Kit Web / CMS