← WordPress Vulnerabilities
WordPress security by component

ThemeGrill Demo Importer

ThemeGrill Demo Importer is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Apr 15, 2026; the highest CVE/CNA score is 9.9.

Plugin slug: themegrill-demo-importer

CVE-2026-40730: ThemeGrill Demo Importer: A security weakness

ThemeGrill Demo Importer is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.0.0.6.

PublishedApr 15, 2026
Known safe version2.0.0.7
Safe version
Apr 15, 2026 CVE-2026-40730
ThemeGrill Demo Importer: A security weakness
ThemeGrill Demo Importer is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.0.0.6.
2.0.0.7
CVE5.3
NVDPending
Oct 16, 2024 CVE-2020-36837
ThemeGrill Demo Importer: Privilege escalation or authentication bypass
ThemeGrill Demo Importer is affected by privilege escalation or authentication bypass. Exploitation requires an authenticated WordPress account. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE9.9
NVDPending