← Database

CVE-2022-3380

HIGH CVSS: 7.2 Published: 2022-10-31 Modified: 2026-06-17

Description

The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.

Affected Platforms

Fastlinemedia Customizer Export\/Import

Weakness Type

CWE-502, CWE-502

References