Access Demo Importer

DATE	CVE	VULNERABILITY TITLE	RISK
2022-04-18	CVE-2022-23975	Cross-Site Request Forgery (CSRF) vulnerability in Accesspressthemes Access Demo Importer Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin. network accesspressthemes CWE-352	4.3
2022-04-18	CVE-2022-23976	Cross-Site Request Forgery (CSRF) vulnerability in Accesspressthemes Access Demo Importer Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to reset all data (posts / pages / media). network accesspressthemes CWE-352	5.8
2021-10-11	CVE-2021-39317	Unrestricted Upload of File with Dangerous Type vulnerability in Accesspressthemes products A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in the /demo-functions.php file or /welcome.php file of the affected products. network low complexity accesspressthemes CWE-434	8.8