CVE-2022-23975: Accesspressthemes Access Demo Importer

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin.

Affected products

• Accesspressthemes Access Demo Importer: up to and including 1.0.7

Published 2022-04-18. Last modified 2026-06-17.