Skip to content
OpenAdvisories
High · 7.6 CVE-2024-34800 EUVD-2024-35066GHSA-r4w9-8gch-5cpv

WordPress Crafthemes Demo Import plugin <= 3.3 - Arbitrary plugin Installation vulnerability

Published Jun 10, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crafthemes Demo Import: from n/a through <= 3.3.

Affected products

VendorProductAffectedFixed
Crafthemes Crafthemes Demo Import ≤ 3.3 —

References