CVE-2022-3380

HIGH 7.2CVE-2022-3380 · Published 31/10/2022 · updated 17/06/2026

In short

CVE-2022-3380 is a HIGH (CVSS 7.2) vulnerability affecting customizer export/import (fastlinemedia).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.3% of all vulnerabilities.
Fix: update to 0.9.5 or later.

Package	Affected versions	Patched versions
customizer export/import fastlinemedia	`< 0.9.5`	`0.9.5`

Description

The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.

References

wpscan.com/vulnerability/a42272a2-f9ce-4aab-9a94-8a4d85008746 · Exploit

More vulnerabilities in customizer export/import

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free