Fix customizer import security issue

awesomemotive · Apr 10, 2024 · a754609 · a754609
1 parent 858fb20
commit a754609
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/inc/CustomizerImporter.php b/inc/CustomizerImporter.php
@@ -84,7 +84,7 @@ public static function import_customizer_options( $import_file_path ) {
 			return $raw;
 		}
 
-		$data = unserialize( $raw );
+		$data = unserialize( $raw , array( 'allowed_classes' => false ) );
 
 		// Data checks.
 		if ( ! is_array( $data ) && ( ! isset( $data['template'] ) || ! isset( $data['mods'] ) ) ) {