Description
WordPress Plugin HashThemes Demo Importer is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently completely reset a site, permanently deleting nearly all database content as well as all uploaded media. WordPress Plugin HashThemes Demo Importer version 1.1.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.2 or latest
References
Related Vulnerabilities
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-4297)
WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (6.7.6)
Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2024-25605)
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-14820)