What’s Vulnerable › Products

kraftplugins Demo Importer Plus vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your kraftplugins Demo Importer Plus version is affected

Latest kraftplugins Demo Importer Plus vulnerabilities

• CVE-2025-14478 — Demo Importer Plus <= 2.0.9 - Authenticated (Author+) Blind XML External Entity Injection via SVG File Upload (CVSS 7.5)
• CVE-2025-69091 — WordPress Demo Importer Plus plugin <= 2.0.8 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-14364 — Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation (CVSS 8.8)
• CVE-2025-13066 — Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass (CVSS 8.8)
• CVE-2024-9172 — Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 5.4)