CVE-2022-1008

The One Click Demo Import plugin before version 3.1.0 contains a vulnerability allowing authenticated administrators to upload arbitrary files to the server due to inadequate file type validation during the import process. This flaw enables remote code execution on affected sites, particularly those where administrative file upload capabilities have been intentionally restricted. The vulnerability impacts versions up to and including 3.0.2 and is resolved in version 3.1.0 and later.

Based on public CVE data (MITRE/NVD).