| Package | Affected versions | Patched versions |
|---|---|---|
| customizer export/import | < 0.9.6 | 0.9.6 |
The Customizer Export/Import WordPress plugin before 0.9.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free