Access violation vulnerability in Crafthemes Demo Import 3.1

The Crafthemes Demo Import plugin for WordPress has a security issue that could allow unauthorized installation of plugins. This issue affects versions up to 3.1 and is caused by a missing capability check on the ct_ctdi_install_plugin() function. This means that attackers who are logged in with subscriber-level access or higher can install dangerous plugins that could give them even more access to the site.