TD
Product
ThemeGrill Demo Importer
by themegrill · last CVE Apr 15, 2026
4
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch

Add ThemeGrill Demo Importer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-36837
9.9
1%
Oct 16
ThemeGrill Demo Importer 1.3.4 - 1.6.1 - Authorization Bypass to Site Reset
Affected: 1.3.4 through 1.6.1
CVE-2020-36333
9.1
4%
May 5
themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook
Affected: before 1.6.2
CVE-2020-36334
8.8
1%
May 5
themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database
Affected: before 1.6.3
CVE-2026-40730
5.3
0%
Apr 15
WordPress ThemeGrill Demo Importer plugin <= 2.0.0.6 - Broken Access Control vulnerability
Affected: through 2.0.0.6
Showing 4