Exporter for Webflow Security & Risk Analysis

wordpress.org/plugins/exporter-for-webflow

Export Posts, Pages & Custom Post Types to Webflow-ready CSV files.

30 active installs v1.2.0 PHP 7.4+ WP 5.8+ Updated Mar 19, 2026
cmscsvexportmigrationwebflow
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Exporter for Webflow Safe to Use in 2026?

Generally Safe

Score 100/100

Exporter for Webflow has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5mo ago
Risk Assessment

The "exporter-for-webflow" plugin v1.2.0 exhibits a generally strong security posture based on the provided static analysis. The complete absence of unpatched CVEs and the plugin's history of zero known vulnerabilities indicate a mature and well-maintained codebase. Furthermore, the static analysis reveals excellent adherence to secure coding practices, with 100% of SQL queries utilizing prepared statements and all output being properly escaped. The presence of nonce and capability checks on all identified AJAX handlers is also a positive sign, minimizing the risk of unauthorized actions through these entry points.

Key Concerns

  • Flows with unsanitized paths detected
  • 3 High severity taint flows detected
  • 4 Flows with unsanitized paths detected
Vulnerabilities
None known

Exporter for Webflow Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Exporter for Webflow Release Timeline

v1.2.0Current
v1.1.0
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

Exporter for Webflow Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
7 prepared
Unescaped Output
0
57 escaped
Nonce Checks
10
Capability Checks
8
File Operations
7
External Requests
3
Bundled Libraries
0

SQL Query Safety

100% prepared7 total queries

Output Escaping

100% escaped57 total outputs
Data Flows · Security
4 unsanitized

Data Flow Analysis

5 flows4 with unsanitized paths
handle_export (exporter-for-webflow.php:798)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Exporter for Webflow Attack Surface

Entry Points9
Unprotected0

AJAX Handlers 9

authwp_ajax_export_for_wf_save_settingsexporter-for-webflow.php:49
authwp_ajax_export_for_wf_reset_settingsexporter-for-webflow.php:50
authwp_ajax_export_for_wf_export_batchexporter-for-webflow.php:51
authwp_ajax_export_for_wf_get_preview_dataexporter-for-webflow.php:52
authwp_ajax_export_for_wf_run_auditexporter-for-webflow.php:53
authwp_ajax_export_for_wf_get_webflow_collectionsexporter-for-webflow.php:54
authwp_ajax_export_for_wf_get_webflow_schemaexporter-for-webflow.php:55
authwp_ajax_export_for_wf_export_taxonomiesexporter-for-webflow.php:56
authwp_ajax_export_for_wf_export_redirectsexporter-for-webflow.php:57
WordPress Hooks 5
actionadmin_menuexporter-for-webflow.php:45
actionadmin_initexporter-for-webflow.php:46
actionadmin_enqueue_scriptsexporter-for-webflow.php:47
actionadmin_headexporter-for-webflow.php:48
actionadmin_menuexporter-for-webflow.php:726
Maintenance & Trust

Exporter for Webflow Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.5
Last updatedMar 19, 2026
PHP min version7.4
Downloads509

Community Trust

Rating100/100
Number of ratings1
Active installs30
Developer Profile

Exporter for Webflow Developer Profile

Flow Guys

1 plugin · 30 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Exporter for Webflow

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/exporter-for-webflow/assets/css/admin.css/wp-content/plugins/exporter-for-webflow/assets/js/admin.js/wp-content/plugins/exporter-for-webflow/assets/js/vendor/jquery.csv.min.js
Script Paths
/wp-content/plugins/exporter-for-webflow/assets/js/admin.js/wp-content/plugins/exporter-for-webflow/assets/js/vendor/jquery.csv.min.js
Version Parameters
exporter-for-webflow/assets/css/admin.css?ver=exporter-for-webflow/assets/js/admin.js?ver=exporter-for-webflow/assets/js/vendor/jquery.csv.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
export-for-wf-admin-page
Data Attributes
data-wf-collection-id
JS Globals
exportForWfAdmin
REST Endpoints
/wp-json/export-for-wf/v1/settings
FAQ

Frequently Asked Questions about Exporter for Webflow