CVE-2022-23975

Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin.

Score

CVSS 3.1 6.5 Medium

Status

Modified - audit@patchstack.com

Published

2022-04-18

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Access Demo Importer Wordpress Plugin (Accesspress Themes)
• Access Demo Importer (Accesspressthemes)

References

• https://patchstack.com/database/vulnerability/access-demo-importer/wordpress-access-demo-importer-plugin-1-0-7-cross-si…
• https://wordpress.org/plugins/access-demo-importer/#developers