Customizer Export/Import · Security record
Is Customizer Export/Import safe?
No known vulnerability affects the current version (0.9.8). 3 issues were found in earlier versions and fixed, the latest disclosed on Sep 6, 2024.
Checked 3 days ago against the WPVulnerability database, for version 0.9.8.
How it’s looked after
- Last release
- Jun 16, 2026 (4 months ago)
- Releases in the last year
- 1
- Tested up to
- WordPress 7.0.8
- Active installs
- 100K+
3 known vulnerabilities
- 2 high
- 1 medium
None affects the current version.
Disclosed each year
- 20221
- 20231
- 20241
Every known vulnerability in Customizer Export/Import
Newest first, with any that affect the current version at the top.
Fixed in 0.9.7.1 · CVE-2024-7620 · Sep 6, 2024 · Wordfence
Fixed in 0.9.6 · CVE-2023-1347 · Apr 25, 2023 · Wordfence
Fixed in 0.9.5 · CVE-2022-3380 · Oct 6, 2022 · Wordfence
Questions about Customizer Export/Import’s security
Is Customizer Export/Import safe to use?
No known vulnerability affects its current version. Earlier versions had issues that are now fixed, so keep Customizer Export/Import updated: most attacks target sites that haven’t updated.
Does Customizer Export/Import have known security vulnerabilities?
None that affect the current version. WPVulnerability’s database lists 3 older issues, fixed in earlier versions, so keep Customizer Export/Import up to date.
Is Customizer Export/Import still maintained?
Yes. Its last release was 4 months ago. No support threads were opened in the last two months.
Is Customizer Export/Import compatible with the latest WordPress?
It’s tested up to WordPress 7.0.8, one version behind the current 7.1. Authors often update this line a few weeks after a release.
Hear about the next one first
Track your plugin on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every plugin updated.