What is the CVSS score of CVE-2026-40730?

CVE-2026-40730 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Themegrill Demo Importer CVE-2026-40730

Q: Which versions of Themegrill Demo Importer are affected by CVE-2026-40730?

Information disclosure via missing authorization in ThemeGrill Demo Importer allows unauthenticated remote attackers to access sensitive demo import data.

EUVD-2026-22887 MEDIUM

Missing Authorization (CWE-862)

2026-04-15 Patchstack

GHSA-r489-83w6-974f

WordPress Authentication Bypass Themegrill Demo Importer Wordpress Plugin Themegrill

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 15:38 vuln.today

CVSS changed

Apr 21, 2026 - 21:22 NVD

5.3 (None) 5.3 (MEDIUM)

EUVD ID Assigned

Apr 15, 2026 - 10:45 euvd

EUVD-2026-22887

CVE Published

Apr 15, 2026 - 10:21 nvd

MEDIUM 5.3

DescriptionCVE.org

Missing Authorization vulnerability in ThemeGrill ThemeGrill Demo Importer themegrill-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeGrill Demo Importer: from n/a through <= 2.0.0.6.

AnalysisAI

Information disclosure via missing authorization in ThemeGrill Demo Importer allows unauthenticated remote attackers to access sensitive demo import data. The vulnerability affects all plugin versions up to 2.0.0.6 and requires no user interaction. No active exploitation or public exploit code has been reported, and the EPSS exploitation probability is very low (0.02%).