CVE-2025-9331 | Spacious Plugin up to 1.9.11 on WordPress Demo Data Import welcome_notice_import_handler authorization

A vulnerability classified as critical was found in Spacious Plugin up to 1.9.11 on WordPress. The impacted element is the function welcome_notice_import_handler of the component Demo Data Import. Such manipulation leads to missing authorization.

This vulnerability is referenced as CVE-2025-9331. It is possible to launch the attack remotely. No exploit is available.