← CVE Intelligence

CVE-2023-1347

Customizer Export/Import < 0.9.6 - Admin+ PHP Object Injection PUBLISHED

Description (CNA)

The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

Affected (CNA)

Vendor / productVersions
Unknown / Customizer Export/Importaffected 0 before 0.9.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.