agentprime: kraftplugins-demo-importer-plusEvery new CVE for kraftplugins-demo-importer-plus.https://agentprime.io/CVE-2025-14478: Demo Importer Plus <= 2.0.9 - Authenticated (Author+) Blind XML External Entity Injection via SVG File Uploadhttps://agentprime.io/advisories/CVE-2025-14478/https://agentprime.io/advisories/CVE-2025-14478/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Jan 2026 07:27:37 GMTCVECVE-2025-14364: Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalationhttps://agentprime.io/advisories/CVE-2025-14364/https://agentprime.io/advisories/CVE-2025-14364/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Dec 2025 09:21:30 GMTCVECVE-2025-13066: Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypasshttps://agentprime.io/advisories/CVE-2025-13066/https://agentprime.io/advisories/CVE-2025-13066/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 03:28:36 GMTCVECVE-2024-9172: Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadhttps://agentprime.io/advisories/CVE-2024-9172/https://agentprime.io/advisories/CVE-2024-9172/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Oct 2024 07:35:26 GMTCVE