CVE-2022-3380: Fastlinemedia Customizer Export/import

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.

Affected products

• Fastlinemedia Customizer Export/import: before 0.9.5 (fixed in 0.9.5)

Published 2022-10-31. Last modified 2026-06-17.