blaze_demo_importer vulnerabilities

CVEs whose affected-version data names the blaze_demo_importer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-106933None

today

Blaze Demo Importer < 1.0.17 - Author+ Stored XSS via SVG Upload

The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to u…

▾ Sunlitvia CVEORG