flex_import vulnerabilities

CVEs whose affected-version data names the flex_import package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-9615Medium· 4.3

4d ago

The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0

The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0. This is due to the license_activate_fleximp() and license_deactivate_fleximp() functions, hooked to the wp_ajax_licens…

▾ Sunlitflextheme · Flex ImportEPSS 0.25%via NVD