WordPress plugin

Demi – One Click Demo Import, Backup & Site Migration security & vulnerabilities

Q: Does Demi – One Click Demo Import, Backup & Site Migration have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Demi – One Click Demo Import, Backup & Site Migration: 1 critical, 1 high, 1 medium. None are known to affect version null.

Q: How do I check which version of Demi – One Click Demo Import, Backup & Site Migration I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Demi – One Click Demo Import, Backup & Site Migration vulnerability?

CVE-2026-15012, published Jul 27, 2026: Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy. Severity: Medium (CVSS 5.3).

Q: Is any Demi – One Click Demo Import, Backup & Site Migration vulnerability listed in CISA KEV?

No. None of the known Demi – One Click Demo Import, Backup & Site Migration vulnerabilities is currently listed in the CISA KEV catalog.

demi-backup-migration— active installsLast vulnerability Jul 27, 2026

No known unpatched vulnerabilities in the latest version

All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

3Known vulnerabilities

Critical1
High1
Medium1
Low0

Vulnerabilities per year

All Demi – One Click Demo Import, Backup & Site Migration vulnerabilities

Demi – One Click Demo Import, Backup & Site Migration vulnerabilities
Severity	Vulnerability	CVE	Published
Critical9.1	Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action ≤0.0.7Update to 0.0.9	CVE-2026-14490	Jul 27
High7.5	One Click Demo Import, Backup & Site Migration <= 0.0.6 - Unauthenticated Sensitive Data Exposure ≤0.0.6Update to 0.0.7	CVE-2026-14333	Jul 13

Critical9.1
Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action
≤0.0.7Update to 0.0.9
CVE-2026-14490Jul 27
High7.5
One Click Demo Import, Backup & Site Migration <= 0.0.6 - Unauthenticated Sensitive Data Exposure
≤0.0.6Update to 0.0.7
CVE-2026-14333Jul 13

Demi – One Click Demo Import, Backup & Site Migration: common questions

Does Demi – One Click Demo Import, Backup & Site Migration have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Demi – One Click Demo Import, Backup & Site Migration: 1 critical, 1 high, 1 medium. None are known to affect version null.

How do I check which version of Demi – One Click Demo Import, Backup & Site Migration I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Demi – One Click Demo Import, Backup & Site Migration vulnerability?

CVE-2026-15012, published Jul 27, 2026: Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy. Severity: Medium (CVSS 5.3).

Is any Demi – One Click Demo Import, Backup & Site Migration vulnerability listed in CISA KEV?

No. None of the known Demi – One Click Demo Import, Backup & Site Migration vulnerabilities is currently listed in the CISA KEV catalog.