themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

• ThemeGrill Demo Importer < 1.6.2 - Database Reset http/cves/2020/CVE-2020-36333.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.