A vulnerability classified as critical has been found in Demo Importer Plus Plugin up to 2.0.8 on WordPress. The impacted element is the function
Ajax::handle_request. The manipulation leads to missing authorization.
This vulnerability is documented as CVE-2025-14364. The attack can be initiated remotely. There is not any exploit available.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
