PLUGIN SECURITY

Is Customizer Export Import safe?

Easily export or import your WordPress customizer settings!

What this plugin does

  • Slug: customizer-export-import
  • Author: Beaver Builder
  • 100000+ active installs
  • 96/100 rating (115 reviews on wordpress.org)
  • 2823032 all-time downloads
  • On WordPress.org since 2014-12-20

customizercustomizer exportcustomizer importexportimport

Maintenance status

  • Latest known version: 0.9.8
  • Last updated: 2026-06-16 6:05pm GMT
  • Tested up to WordPress: 7.0.4
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

3 known CVEs on file for Customizer Export Import. Reported between 2022 and 2024.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-7620 Customizer Export/Import [customizer-export-import] < 0.9.7.1 Unrestricted Upload of File with Dangerous Type Medium 6.6 < 0.9.7.1 0.9.7.1 2024-09-06 ✓ fixed in latest
CVE-2023-1347 Customizer Export/Import [customizer-export-import] < 0.9.6 Deserialization of Untrusted Data High 7.2 < 0.9.6 0.9.6 2023-04-25 ✓ fixed in latest
CVE-2022-3380 Customizer Export/Import [customizer-export-import] < 0.9.5 Deserialization of Untrusted Data High 7.2 < 0.9.5 0.9.5 2022-10-06 ✓ fixed in latest

How to fix it

Keep Customizer Export Import updated — 0.9.8 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.