CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-3380

The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 76.2%

CVSS Severity

CVSS v3 Score 7.2

References

Products affected by CVE-2022-3380

Fastlinemedia » Customizer Export/import » Version: N/A

cpe:2.3:a:fastlinemedia:customizer_export/import:-
Fastlinemedia » Customizer Export/import » Version: 0.1

cpe:2.3:a:fastlinemedia:customizer_export/import:0.1
Fastlinemedia » Customizer Export/import » Version: 0.2

cpe:2.3:a:fastlinemedia:customizer_export/import:0.2
Fastlinemedia » Customizer Export/import » Version: 0.3

cpe:2.3:a:fastlinemedia:customizer_export/import:0.3
Fastlinemedia » Customizer Export/import » Version: 0.4

cpe:2.3:a:fastlinemedia:customizer_export/import:0.4
Fastlinemedia » Customizer Export/import » Version: 0.5

cpe:2.3:a:fastlinemedia:customizer_export/import:0.5
Fastlinemedia » Customizer Export/import » Version: 0.6

cpe:2.3:a:fastlinemedia:customizer_export/import:0.6
Fastlinemedia » Customizer Export/import » Version: 0.7

cpe:2.3:a:fastlinemedia:customizer_export/import:0.7
Fastlinemedia » Customizer Export/import » Version: 0.8

cpe:2.3:a:fastlinemedia:customizer_export/import:0.8
Fastlinemedia » Customizer Export/import » Version: 0.9

cpe:2.3:a:fastlinemedia:customizer_export/import:0.9
Fastlinemedia » Customizer Export/import » Version: 0.9.1

cpe:2.3:a:fastlinemedia:customizer_export/import:0.9.1
Fastlinemedia » Customizer Export/import » Version: 0.9.4

cpe:2.3:a:fastlinemedia:customizer_export/import:0.9.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-3380

Products

Pricing

Contact Us