Sparkle Demo Importer

Sparkle Demo Importer has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Sparkle Demo Importer has a vendor fix available, so running the current release closes it.

All of these findings were reported by Lucio Sá. Sparkle Demo Importer is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Sparkle Demo Importer vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2024-6120

Sparkle Demo Importer <= 1.4.7 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import

Read the full analysis

Vulnerability Records

1 records


2024-06-21 11:04	Sparkle Demo Importer <= 1.4.7 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import Sparkle Demo Importer <= 1.4.7	`CVE-2024-6120`	6.5 Medium	Lucio Sá	Yes

Showing 1–1 of 1 reports

Latestv1.4.8

Sparkle Demo Importer

Author

Sparkle WP

5.0(1)

100/100

Last Updated

2024-06-20 (2y ago)

Active Installs

5,000+

Downloads

235,925

Requires WP

4.0+

Requires PHP

5.6+

Tested up to

WP 6.2.11

Created

2020-12-02 (6y ago)

Home | Docs | Premium | All themes | Plugins | Blog Sparkle Demo Importer imports sparkle themes full demo with just one click. It is specially developed for demo import purpose. This plugin works for theme developed by SparleThemes and if other themes wants to use then they have to use action filter to work. You just need to define the array that includes the location of the demo zip files and other related info. Get the outstanding themes from Sparkle Themes __ Check all of our Free themes __ Educenter Construction Light AppZend Sparkle Store BuzzStore MetroStore Online eStore Educenter Xpert __ Check all of our Premium plugins __ Construction Plus AppZend Pro Educenter Pro Sparkle Store Pro Online eStore Pro Chankhe Plus BuzzStore Pro FitnessPark Pro Blogger Buzz Pro Medical Heed Pro MetroStore Pro Features Import Complete Demo Data Automatic Install Required Plugins Import Widgets Data Import Customizer Data Reset Site Credits * Forked from HashThemes Demo Importer Plugin

View on WordPress.org