Approved changes feed: RSS · Atom

cpe:2.3:a:themegrill:themegrill_demo_importer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThemegrill (bf7edc03-edd7-5596-8b98-c66d683c388f)
ProductThemegrill Demo Importer (62fc30d0-3816-5bba-ac48-65284be106b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/themegrill/themegrill-demo-importer purl2cpe 2026-06-01 10:11:29.966120
pkg:github/wpplugins/themegrill-demo-importer purl2cpe 2026-06-01 10:11:29.966122

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40730 vulnerable 2026-06-08 08:01:20.936786 WordPress ThemeGrill Demo Importer plugin <= 2.0.0.6 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in ThemeGrill ThemeGrill Demo Importer themegrill-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeGrill Demo Importer: from n/a through <= 2.0.0.6.
Published: 2026-04-15T10:21:33.831Z
Updated: 2026-04-29T09:52:04.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36837 vulnerable 2026-06-08 05:25:49.636014 ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset
CRITICAL (9.9)
The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset_wizard_actions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there is a user named 'admin', the attacker will become automatically logged in as an administrator.
Published: 2024-10-16T06:43:35.980Z
Updated: 2024-10-16T18:03:47.811Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.