WordPress Theme Importer Vulnerabilities

Wordpress Theme Importer vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

15 October 2025

Cross-Site Request Forgery in Theme Importer Plugin for WordPress
CVE-2025-10312
WordPressTheme Importer4.3MEDIUM

26 September 2025

CSRF Vulnerability in Di Themes Demo Site Importer by Di Themes
CVE-2025-58914
WordPressDi Themes Demo Site Im...4.3MEDIUM

16 October 2024

Freemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974
WordpressYasr – Yet Another Sta...6.3MEDIUM

16 January 2024

Theme-Demo-Importer < 1.1.1 - Admin+ Arbitrary File Upload
CVE-2022-1538
WordpressTheme Demo Import👾🟡7.2HIGH

20 December 2023

WordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload
CVE-2023-28170
WordPressTheme Demo Import9.1CRITICAL

5 December 2022

Advanced Import < 1.3.8 - Arbitrary Plugin Installation & Activation via CSRF
CVE-2022-3677
WordpressAdvanced Import : One ...👾🟡6.5MEDIUM

7 March 2022

Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution
CVE-2022-0440
WordpressCatch Themes Demo Import7.2HIGH

21 October 2021

Catch Themes Demo Import <= 1.7 Admin+ Arbitrary File Upload
CVE-2021-39352
WordPressCatch Themes Demo Import👾🟡EPSS 77%7.2HIGH

18 October 2021

Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
CVE-2021-24752
WordpressEssential Widgets5.7MEDIUM