Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Access Demo Importer Plugin | — | Update access-demo-importer plugin to version 1.0.7, or a newer patched version | May 15, 2025 | Jan 11, 2022 |
| Accesspress Basic Theme | — | Update accesspress-basic theme to version 3.2.2, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Accesspress Lite Theme | — | Update accesspress-lite theme to version 2.93, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Accesspress Mag Theme | — | Update accesspress-mag theme to version 2.6.6, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Accesspress Parallax New Theme | — | Update accesspress-parallax-new theme to version 4.6, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Accesspress Root Theme | — | Update accesspress-root theme to version 2.6.0, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Accesspress Store Theme | — | Update accesspress-store theme to version 2.5.0, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Arrival Theme | — | Update arrival theme to version 1.4.3, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Bingle Theme | — | Update bingle theme to version 1.0.5, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Bloger Theme | — | Update bloger theme to version 1.2.7, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Construction Lite Theme | — | Update construction-lite theme to version 1.2.6, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Digital Agency Lite Theme | — | Update digital-agency-lite theme to version 1.1.7, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Doko Theme | — | Update doko theme to version 1.1.0, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Eightlaw Lite Theme | — | Update eightlaw-lite theme to version 2.1.6, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Eightmedi Lite Theme | — | Update eightmedi-lite theme to version 2.1.9, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Eightstore Lite Theme | — | Update eightstore-lite theme to version 1.2.6, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Enlighten Theme | — | Update enlighten theme to version 1.3.6, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Fotography Theme | — | Update fotography theme to version 2.4.1, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Opstore Theme | — | Update opstore theme to version 1.4.4, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Parallaxsome Theme | — | Update parallaxsome theme to version 1.3.7, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Punte Theme | — | Update punte theme to version 1.1.3, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Sakala Theme | — | Update sakala theme to version 1.0.5, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Storevilla Theme | — | Update storevilla theme to version 1.4.2, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Swing Lite Theme | — | Update swing-lite theme to version 1.2.0, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| The Launcher Theme | — | Update the-launcher theme to version 1.3.3, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Vmag Theme | — | Update vmag theme to version 1.2.8, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Vmagazine Lite Theme | — | Update vmagazine-lite theme to version 1.3.6, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Vmagazine News Theme | — | Update vmagazine-news theme to version 1.0.6, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Wp Store Theme | — | Update wp-store theme to version 1.2.0, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Zigcy Baby Theme | — | Update zigcy-baby theme to version 1.0.7, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Zigcy Cosmetics Theme | — | Update zigcy-cosmetics theme to version 1.0.6, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
| Zigcy Lite Theme | — | Update zigcy-lite theme to version 2.1.0, or a newer patched version | Dec 8, 2025 | Jan 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub