PLUGIN SECURITY
Is One Click Demo Import safe?
Import your demo content, widgets and theme settings with one click. Theme authors! Enable simple theme demo import for your users.
What this plugin does
- Slug:
one-click-demo-import - Author: Syed Balkhi
- 1000000+ active installs
- 86/100 rating (79 reviews on wordpress.org)
- 20859766 all-time downloads
- On WordPress.org since 2016-03-25
contentimportsettingstheme optionswidgets
Maintenance status
- Latest known version: 3.4.1
- Last updated: 2026-04-22 1:28pm GMT
- Tested up to WordPress: 6.9.7
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
2 known CVEs on file for One Click Demo Import. Reported between 2022 and 2024.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-34433 | One Click Demo Import [one-click-demo-import] < 3.2.1 | Deserialization of Untrusted Data | High 7.2 | < 3.2.1 | 3.2.1 | 2024-05-07 | ✓ fixed in latest |
| CVE-2022-1008 | One Click Demo Import [one-click-demo-import] < 3.1.0 | Unrestricted Upload of File with Dangerous Type | High 7.2 | < 3.1.0 | 3.1.0 | 2022-03-21 | ✓ fixed in latest |
How to fix it
Keep One Click Demo Import updated — 3.4.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Redux Framework — 900000+ active installs — 88/100 (273) — max PHP 8.4
- Widget Importer & Exporter — 200000+ active installs — 94/100 (117) — max PHP 8.4
- Customizer Export/Import — 100000+ active installs — 96/100 (115) — max PHP 8.4
- Search & Replace — 100000+ active installs — 86/100 (283) — max PHP 8.4
- Add From Server — 60000+ active installs — 92/100 (239)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.