Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:customizer_export/import:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductCustomizer Export/Import (78177519-afa0-5d52-85ac-c8d899bf849e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1347 vulnerable 2026-06-08 05:52:35.679684 Customizer Export/Import < 0.9.6 - Admin+ PHP Object Injection
The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
Published: 2023-05-08T13:58:18.914Z
Updated: 2025-02-04T20:32:58.159Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3380 vulnerable 2026-06-08 05:48:20.799110 Customizer Export/Import < 0.9.5 - Admin+ PHP Objection Injection
The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
Published: 2022-10-31T00:00:00.000Z
Updated: 2025-05-06T20:16:33.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.