← Back

Ocdi

ocdi

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
One Click Demo Import
one_click_demo_import
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-34433
1Ocdi
1One Click Demo Import
Jun 17, 2026
May 14, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
Deserialization of Untrusted Data vulnerability in OCDI One Click Demo Import.This issue affects One Click Demo Import: from n/a through 3.2.0.
CVE-2022-1008
1Ocdi
1One Click Demo Import
Jun 17, 2026
Apr 11, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disal...Show more
The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowedShow less