Customizer Export/Import vulnerabilities
We track 2 vulnerabilities in Customizer Export/Import products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 8, 2023.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest Customizer Export/Import vulnerabilities
- 7.2 High severity
Customizer Export/Import: Deserialization of Untrusted Data
The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
- 7.2 High severity
Customizer Export/Import: Deserialization of Untrusted Data
The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports (intentionally or not) a malicious file and a suitable gadget chain is present on the