Access Demo Importer

Access Demo Importer has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2022; all 4 are fixed as of September 2026. Their average CVSS score is 8.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 4 high. 2022 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (50%). Other recurring categories include Missing Authorization, Unrestricted Upload Of File With Dangerous Type.

Every one of the 4 issues recorded for Access Demo Importer has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (3) reported by R3N0.

Strategic Overview

Avg CVSSHigh

8.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Access Demo Importer vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

4 records


2022-01-24 12:01	Access Demo Importer <= 1.0.7 - Cross-Site Request Forgery to Data Reset Access Demo Importer <= 1.0.7	`CVE-2022-23976`	8.1 High	R3N0	Yes
2022-01-11 00:00	AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery Access Demo Importer <= 1.0.6	`N/A`	8.8 High	R3N0	Yes
2022-01-11 00:00	AccessPress Themes and Plugin <= Various Versions - Missing Authorization to Arbitrary Plugin Deactivation/Activation Access Demo Importer <= 1.0.6	`CVE-2022-23975`	8.8 High	R3N0	Yes
2021-10-06 19:17	AccessPress Themes and Plugin <= Various Versions - Authenticated (Subscriber+) Arbitrary File Upload Access Demo Importer <= 1.0.6	`CVE-2021-39317`	8.8 High	Chloe Chamberland	Yes

Showing 1–4 of 4 reports