High · 8.1 CVE-2022-23976 EUVD-2022-28891GHSA-fxxg-mjjq-cmfg

WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)

Published Apr 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to reset all data (posts / pages / media).

Vendor	Product	Affected	Fixed
AccessPress Themes	Access Demo Importer (WordPress plugin)	<= 1.0.7 – ≤ 1.0.7	—