WordPress plugin
Blaze Demo Importer security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium2
- Low0
All Blaze Demo Importer vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting ≤1.0.16Update to 1.0.17 | CVE-2026-106933 | |
| High8.1 | 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Database Reset and File Deletion 1.0.0 – 1.0.13Update to 1.0.14 | CVE-2025-13334 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install ≤1.0.12Update to 1.0.13 | CVE-2025-8446 |
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤1.0.16Update to 1.0.17
- High8.11.0.13 - Missing Authorization to Authenticated (Subscriber+) Database Reset and File Deletion
1.0.0 – 1.0.13Update to 1.0.14
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install
≤1.0.12Update to 1.0.13
Blaze Demo Importer: common questions
Does Blaze Demo Importer have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Blaze Demo Importer: 1 high, 2 medium. None are known to affect version null.
How do I check which version of Blaze Demo Importer I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Blaze Demo Importer vulnerability?
CVE-2026-106933, published Oct 16, 2026: Blaze Demo Importer <= 1.0.16 - Authenticated (Author+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Blaze Demo Importer vulnerability listed in CISA KEV?
No. None of the known Blaze Demo Importer vulnerabilities is currently listed in the CISA KEV catalog.