WordPress plugin
Magic Import Document Extractor security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium2
- Low0
All Magic Import Document Extractor vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Sensitive Information Exposure ≤1.0.6No patch available | CVE-2025-15508 | |
| Medium5.3 | Missing Authorization to Unauthenticated Plugin License Status Modification ≤1.0.5Update to 1.0.6 | CVE-2025-15507 |
- Medium5.3Unauthenticated Sensitive Information Exposure
≤1.0.6No patch available
- Medium5.3Missing Authorization to Unauthenticated Plugin License Status Modification
≤1.0.5Update to 1.0.6
Magic Import Document Extractor: common questions
Does Magic Import Document Extractor have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Magic Import Document Extractor: 2 medium. At least one is not fixed in the latest version.
How do I check which version of Magic Import Document Extractor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Magic Import Document Extractor vulnerability?
CVE-2025-15508, published Feb 3, 2026: Magic Import Document Extractor <= 1.0.6 - Unauthenticated Sensitive Information Exposure. Severity: Medium (CVSS 5.3).
Is any Magic Import Document Extractor vulnerability listed in CISA KEV?
No. None of the known Magic Import Document Extractor vulnerabilities is currently listed in the CISA KEV catalog.