Kraftplugins Demo Importer Plus vulnerabilities
- kraft plugins demo importer plusDemo Importer Plus <= 2.0.9 - Authenticated (Author+) Blind XML External Entity Injection via SVG File Upload7.5 High
- kraft plugins demo importer plusDemo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation8.8 High
- kraft plugins demo importer plusDemo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass8.8 High
- kraft plugins demo importer plusDemo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4 Medium