CVE-2020-36333
9.1 criticalEPSS 4.0%
Critical (9.1) in themegrill themegrill demo importer. EPSS 4.0% chance of exploitation in the next 30 days.
themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook.
Severity
CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H- EPSS
- 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- themegrill:themegrill_demo_importer
References
Check your stackJSON