Vulnerability Details CVE-2023-1347
The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
Exploit prediction scoring system (EPSS) score
EPSS Score 0.165
EPSS Ranking 94.6%
CVSS Severity
CVSS v3 Score 7.2
References
Products affected by CVE-2023-1347
-
cpe:2.3:a:fastlinemedia:customizer_export/import:-
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.1
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.2
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.3
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.4
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.5
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.6
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.7
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.8
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.9
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.9.1
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.9.4
-
cpe:2.3:a:fastlinemedia:customizer_export/import:0.9.5