CVE-2025-8446 | blazethemes Blaze Demo Importer Plugin up to 1.0.12 on WordPress Install blaze_demo_importer_install_plugin authorization

A vulnerability classified as critical has been found in blazethemes Blaze Demo Importer Plugin up to 1.0.12 on WordPress. Impacted is the function blaze_demo_importer_install_plugin of the component Install Handler. Performing manipulation results in missing authorization.

This vulnerability is identified as CVE-2025-8446. The attack can be initiated remotely. There is not any exploit available.