WordPress.Customizer.ExportImport.Plugin.Remote.Code.Execution

Description

This indicates an attack attempt to exploit a Code Execution vulnerability in WordPress Customizer Export/Import Plugin.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application

Affected Products

WordPress Customizer Export/Import Plugin prior to 0.9.6

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Upgrade to version 0.9.6 or higher.
https://wordpress.org/plugins/customizer-export-import/

References