← Back

Wpneuron

wpneuron

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Sparkle Demo Importer
sparkle_demo_importer
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-6120
1Wpneuron
1Sparkle Demo Importer
Jun 17, 2026
Jun 22, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multiple functions in all versions up to and including 1.4.7. This...Show more
The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multiple functions in all versions up to and including 1.4.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete all posts, pages, and uploaded files, as well as download and install a limited set of demo plugins.Show less