CVE-2023-1347: Fastlinemedia Customizer Export/import

High severity, CVSS 7.2. EPSS: 16% chance of exploitation in the next 30 days.

The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

Affected products

• Fastlinemedia Customizer Export/import: before 0.9.6 (fixed in 0.9.6)

Published 2023-05-08. Last modified 2026-06-17.