Flex Import
Flex Import has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Flex Import has a vendor fix available, so running the current release closes it.
All of these findings were reported by Benedictus Jovan (aillesiM). Flex Import is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.5.
CVE-2026-9615Flex Import <= 3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via 'license_activate_fleximp' and 'license_deactivate_fleximp' AJAX Actions
Read the full analysisVulnerability Records

Flex Import
Author
flextheme
Flex Import is a modern one-click demo importer plugin built to simplify and accelerate WordPress website creation. Whether you are building a business website, portfolio, agency website, ecommerce store, blog, or landing page, Flex Import helps you launch professional websites quickly using pre-designed starter templates and layouts. The plugin is designed for Premium WordPress Themes and WordPress Theme Bundle, providing a smooth onboarding experience with automatic plugin installation, responsive templates, and easy demo imports directly from your WordPress dashboard. With Flex Import, you can import complete website demos including pages, posts, widgets, menus, customizer settings, and theme options in just a few clicks — saving hours of manual setup time. The plugin includes a clean and beginner-friendly dashboard where users can browse starter templates, manage imports, install required plugins, and access support resources. ⚡ Flex Import also gives users access to professionally designed WordPress Theme Bundle with multiple modern website designs for different industries and business types. Key Features One-Click Demo Import Instantly import: Pages Posts Images Menus Widgets Theme Options Customizer Settings WordPress Theme Bundle Access a growing collection of Premium WordPress Themes and complete WordPress Theme Bundle designed for: Business Websites Ecommerce Stores Agency Websites Blogs Portfolio Websites Landing Pages Startup Websites And many more starter website templates. Automatic Plugin Installation Flex Import automatically installs and activates all required and recommended plugins needed for starter templates. Starter Templates Library Access professionally designed templates for multiple industries and website categories. Centralized Dashboard Manage imports, templates, plugins, support, and theme bundle access from one clean WordPress dashboard. Responsive Layouts All starter templates are fully responsive and optimized for: Desktop Tablet Mobile Devices Elementor Compatible Built to work smoothly with Elementor layouts. Automatic Template Updates Receive updated starter templates, layouts, and improvements regularly. Beginner Friendly Easy setup process designed for beginners, freelancers, agencies, and developers. Lightweight & Optimized Built with performance and modern WordPress standards in mind. Multisite Compatible Supports WordPress Multisite installations. Why Choose Flex Import? Save hours of website setup time Launch professional websites quickly Import complete demos instantly Access Premium WordPress Themes Explore complete WordPress Theme Bundles User-friendly interface Responsive and modern layouts Compatible with modern WordPress themes Fast and secure demo importing Regular updates and improvements External services This plugin integrates with our server’s API to provide seamless JSON-based data communication. Additionally, it includes a demo import feature that fetches and writes pre-coded demo files directly to your WordPress installation for a smooth setup experience. The server API and demo import are utilized to enhance the functionality of your WordPress site by automating data handling and demo content integration. All data interactions are secure and comply with standard best practices. This service is provided by “Flextheme”: terms of use, privacy policy.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C