WordPress plugin
Demi – One Click Demo Import, Backup & Site Migration security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium1
- Low0
All Demi – One Click Demo Import, Backup & Site Migration vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Information Exposure to Arbitrary Directory Copy ≤0.0.8Update to 0.0.9 | CVE-2026-15012 | |
| Critical9.1 | Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action ≤0.0.7Update to 0.0.9 | CVE-2026-14490 | |
| High7.5 | One Click Demo Import, Backup & Site Migration <= 0.0.6 - Unauthenticated Sensitive Data Exposure ≤0.0.6Update to 0.0.7 | CVE-2026-14333 |
- Medium5.3Unauthenticated Information Exposure to Arbitrary Directory Copy
≤0.0.8Update to 0.0.9
- Critical9.1Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action
≤0.0.7Update to 0.0.9
- High7.5One Click Demo Import, Backup & Site Migration <= 0.0.6 - Unauthenticated Sensitive Data Exposure
≤0.0.6Update to 0.0.7
Demi – One Click Demo Import, Backup & Site Migration: common questions
Does Demi – One Click Demo Import, Backup & Site Migration have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Demi – One Click Demo Import, Backup & Site Migration: 1 critical, 1 high, 1 medium. None are known to affect version null.
How do I check which version of Demi – One Click Demo Import, Backup & Site Migration I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Demi – One Click Demo Import, Backup & Site Migration vulnerability?
CVE-2026-15012, published Jul 27, 2026: Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy. Severity: Medium (CVSS 5.3).
Is any Demi – One Click Demo Import, Backup & Site Migration vulnerability listed in CISA KEV?
No. None of the known Demi – One Click Demo Import, Backup & Site Migration vulnerabilities is currently listed in the CISA KEV catalog.