Demi – One Click Demo Import, Backup & Site Migration

Demi – One Click Demo Import, Backup & Site Migration has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 3 are fixed as of September 2026. Their average CVSS score is 7.3, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 1 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 2 of the records (67%). Other recurring categories include Path Traversal.

Every one of the 3 issues recorded for Demi – One Click Demo Import, Backup & Site Migration has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Demi – One Click Demo Import, Backup & Site Migration is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh
7.3/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Demi – One Click Demo Import, Backup & Site Migration vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.1CVE-2026-14490

Demi <= 0.0.6 - Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action

Read the full analysis

Vulnerability Records

3 records
Demi – One Click Demo Import, Backup & Site Migration banner
Latestv0.1.2

Demi – One Click Demo Import, Backup & Site Migration

deveasel

Author

deveasel

0.0(0)
0/100
Last Updated
2026-08-28 (13d ago)
Active Installs
300+
Downloads
4,804
Requires WP
6.5+
Requires PHP
8.0+
Tested up to
WP 7.1
Created
2026-04-09 (5mo ago)

Free WordPress Toolkit for Demo Import, Backup & Restore, Site Migration, Search & Replace and Site Reset Demi is an all-in-one WordPress site management plugin that makes it easy to import demo content, create and restore backups, migrate websites, search & replace content, and reset your site. It brings demo content uploading, website backup and restore, website migration, database search & update, and area reset into a single, lightweight tool so that you now do not want to juggle several separate plugins to control your WordPress website online. Whether you’re launching a brand-new website or maintaining an existing one, Demi offers you the essential tools to deal with the most commonplace WordPress obligations immediately out of your dashboard, without complicated manual steps or command-line work. Visit Site | Read Docs WordPress One-Click Demo Import Get a ready-to-use website up and running in minutes with Demi’s one click demo import feature. It turns a clean WordPress setup into a complete starter website importing pages, posts, media, widgets, menus, and settings in a single step. Theme developers can use Demi to offer their own WordPress starter templates and predefined demo websites, giving clients a smoother, more professional onboarding experience right out of the gate. WordPress Backup & Restore Create and manage WordPress backups directly from your dashboard. As a complete WordPress backup and restore solution. Choose between: Content Backup – Back up your WordPress content and database. Full Backup – Back up your entire WordPress website, including files and database. Restore – Restore your website from a previously created backup. You can keep multiple backups on hand and restore your site whenever needed. Demi is designed to work as the best WordPress backup plugin candidate for users who also want migration and demo import built in all from one dashboard, without installing extra add-ons. WordPress Site Migration Move your WordPress website from one server or domain to another in minutes with Demi’s built-in WordPress site migration tool. It handles the complete process for you, removing the need for complicated manual database and file operations. This makes it easy to migrate your site safely and quickly. Use it to: Move a website to a new hosting provider. Move a website to a new domain. Clone a WordPress website to another WordPress installation. Transfer website files and the database in one process. Demi is built to be an all-in-one migration and backup solution for anyone who needs to move a WordPress site without the hassle. Search & Replace Find and replace text across selected WordPress database tables, especially useful for updating URLs after a migration or changing other database values in bulk. The search and replace tool includes: Dry run mode to preview matches before modifying the database. The option to select individual tables or search across all available tables. Case-sensitive matching. Whole-word matching. Regular expression support. Safe handling of serialized data, so values are correctly unpacked and re-packed. Optional GUID column handling. WordPress Site Reset Reset specific parts of your WordPress site, or perform a complete reset. Reset actions are irreversible, so always create a backup before proceeding. Available options include: Reset Plugins – deactivate and delete plugins and remove their data and settings. Reset Themes – Remove installed themes and revert to the default WordPress theme. Clean Media Library – Delete uploaded media files from the media library. Reset Database – Reset the database while keeping the administrator account intact. Full Site Reset – Wipe plugins, themes, media, and database data for a fresh installation. Built for WordPress Developers Demi is designed to be useful for everyday WordPress users and developers alike. Theme developers can use the demo import feature to offer starter websites. Agencies and freelancers can rely on the backup, migration, search & replace, and reset tools as part of their regular workflow. Demi also fits naturally alongside the other tools already in your stack — including WordPress security plugins, SEO plugins, and performance tools like WP-Optimize. It also works well for WordPress ecommerce sites that need reliable backups and safe migrations before launch. Key features: One-click demo import Content backup Full website backup Backup restore WordPress site migration Database search & replace with dry run mode Serialized data support for search & replace Selective WordPress site reset Full WordPress site reset Developer-friendly hooks and filters

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C