← Database

CVE-2023-1347

HIGH CVSS: 7.2 Published: 2023-05-08 Modified: 2026-06-17

Description

The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

Affected Platforms

Fastlinemedia Customizer Export\/Import

Weakness Type

CWE-502

References