All 2 CVE vulnerabilities found in Demi – One Click Demo Import, Backup & Site Migration, with AI-generated Chinese analysis, references, and POCs.
Vendor: deveasel
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-14490 | Demi <= 0.0.6 - Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action CWE-22 | 7.5 | High | 2026-07-28 |
| CVE-2026-15012 | Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy CWE-200 | 5.3 | Medium | 2026-07-28 |
All 2 known CVE vulnerabilities affecting Demi – One Click Demo Import, Backup & Site Migration with full Chinese analysis, references, and POCs where available.