PostmagThemes One click Demo Import for WordPress Site

PostmagThemes One click Demo Import for WordPress Site has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; all 2 are fixed as of October 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 2 of the records (100%).

Every one of the 2 issues recorded for PostmagThemes One click Demo Import for WordPress Site has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by thunder.god.hhh. PostmagThemes One click Demo Import for WordPress Site is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all PostmagThemes One click Demo Import for WordPress Site vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2022-1540

PostmagThemes Demo Import <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

2 records


2022-11-11 00:00	PostmagThemes Demo Import <= 1.0.7 - Authenticated (Administrator+) Arbitrary File Upload PostmagThemes One click Demo Import… <= 1.0.7	`CVE-2022-1540`	7.2 High	thunder.god.hhh	Yes
2022-08-05 00:00	PostmagThemes Demo Import <= 1.0.6 - Authenticated (Admin+) Arbitrary File Upload PostmagThemes One click Demo Import… <= 1.0.6	`N/A`	7.2 High	Anonymous	Yes

Showing 1–2 of 2 reports

Latestv1.1.9

PostmagThemes One click Demo Import for WordPress Site

Author

postmagthemes

0.0(0)

0/100

Last Updated

2026-10-01 (27d ago)

Active Installs

1,000+

Downloads

28,938

Requires WP

4.7+

Requires PHP

5.8+

Tested up to

WP 7.1.3

Created

2019-10-26 (7y ago)

PostmagThemes Demo Import makes it easy to set up a PostmagThemes theme with ready-made demo content. Instead of adding demo posts and other content manually, simply install and activate the plugin, then go to Appearance → Import Demo Data. The demos available for your active PostmagThemes theme will be shown there. Check out demo of our ocdi **Importing demo content ***With a Postmagthemes theme: Activate a Postmagthemes theme that supports demo import, such as Context blog. Go to Appearance > Import Demo Data. You’ll see a preview of the theme’s demo. Click Import and wait for it to finish. ***With a theme from another author: Get the three demo files from the theme author’s website: the content file (.xml), the widgets file (.wie), and the customizer settings file (.dat). Go to Appearance > Import Demo Data. Since the active theme isn’t a Postmagthemes one, you’ll see three upload fields instead of a demo preview. Upload each file to its matching field, then click Import. Images Resources All images are licensed under Creative Commons Zero (CC0) license. * banner-772×250.jpg, banner-1544×500.jpg, icon-128×128.jpg, icon-256×256.jpg Self Created – CCO

View on WordPress.org