Crafthemes Demo Import

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:aruphash:crafthemes_demo_import:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAruphash (5db8e4b4-3e5c-55d5-a0b4-b1bf3934d719)
ProductCrafthemes Demo Import (551d897a-59c2-5260-96ed-90fffa82b668)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9698 vulnerable 2026-06-08 07:00:28.550992 Crafthemes Demo Import <= 3.3 - Authenticated (Admin+) Arbitrary File Upload in process_uploaded_files
HIGH (7.2)
The Crafthemes Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'process_uploaded_files' function in all versions up to, and including, 3.3. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Published: 2024-12-14T04:23:48.240Z
Updated: 2026-04-08T17:29:33.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34800 vulnerable 2026-06-08 06:37:35.042423 WordPress Crafthemes Demo Import plugin <= 3.3 - Arbitrary plugin Installation vulnerability
HIGH (7.6)
Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crafthemes Demo Import: from n/a through <= 3.3.
Published: 2024-06-10T15:41:19.580Z
Updated: 2026-04-28T16:09:50.908Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.