Advanced Import
Advanced Import has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 7.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Server-Side Request Forgery (SSRF).
Every one of the 2 issues recorded for Advanced Import has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Advanced Import is installed on roughly 80,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2022-3677Advanced Import <= 1.3.7 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

Advanced Import
Author
AddonsPress
Import Data or Demo Content which is exported by Advanced Export Advanced Import is the ultimate solution for WordPress theme and plugin developers who want to provide a seamless demo import experience for their users. With a simple one-click interface, it allows users to import demo content, widgets, customizer settings, and even Gutenberg block data effortlessly. Key Features One-Click Demo Import: Easily import all demo content with a single click. Customizer Settings Import: Retain your theme’s look and feel by importing customizer settings. Widget Data Import: Quickly set up widgets to match your demo layout. Gutenberg Blocks Import: Import block-based content for modern themes. Media Files Import: Seamlessly upload and integrate demo media. Developer-Friendly Hooks: Extend or customize the import process with available actions and filters. Why Use Advanced Import? Whether you’re a theme developer offering demo content or a user setting up a site, Advanced Import makes the process hassle-free. It saves time, reduces manual setup effort, and ensures consistency between demo and live sites. Features for Theme Author Code/Plugin example available Support for the premium version or premium plugin of the free theme Install separate dependent plugin/s for each demo starter package of the theme Categorized available demo import starter package to type and categories Search filter keywords for demo starter packages Sufficient hooks to customize the plugin design and functionality Add demo URL Add pro URL Better experience for the user Dashboard Location Theme Demo Import Screen Dashboard -> Appearance -> Demo Import Zip File Import Screen Dashboard -> Tool -> Advanced Import
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C