Menu Export Import Security & Risk Analysis

wordpress.org/plugins/menu-export-import

Easily export and import WordPress navigation menus between sites. A quick and reliable solution for duplicating or transferring menu structures.

100 active installs v1.0.1 PHP 7.2+ WP 5.2+ Updated Dec 7, 2024
exportimportmenunavigationwordpress
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Menu Export Import Safe to Use in 2026?

Generally Safe

Score 92/100

Menu Export Import has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The 'menu-export-import' plugin version 1.0.1 demonstrates a generally strong security posture with several good practices observed. The absence of any known CVEs and the limited attack surface, with all entry points protected by authentication, are positive indicators. The code also shows good adherence to secure coding standards, with 100% of SQL queries using prepared statements and a high percentage of output being properly escaped. However, there are minor areas for potential improvement. The presence of a file operation without further context raises a slight concern, as does the single capability check, which could be more robust depending on the plugin's functionality. While the taint analysis found no critical or high severity issues, a thorough review of the file operation is recommended to ensure it doesn't introduce vulnerabilities.

Key Concerns

  • File operation detected without detailed context
  • Limited capability checks (1 total)
Vulnerabilities
None known

Menu Export Import Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Menu Export Import Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
34 escaped
Nonce Checks
3
Capability Checks
1
File Operations
1
External Requests
0
Bundled Libraries
0

Output Escaping

94% escaped36 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
preview_menus (includes\classes\Ajax_Export_Import_Nav_Menu.php:173)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Menu Export Import Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_preview_menusincludes\classes\Ajax_Export_Import_Nav_Menu.php:12
authwp_ajax_import_menuincludes\classes\Ajax_Export_Import_Nav_Menu.php:13
WordPress Hooks 4
actionadmin_menuincludes\classes\Ajax_Export_Import_Nav_Menu.php:7
actionadmin_initincludes\classes\Ajax_Export_Import_Nav_Menu.php:9
actionadmin_enqueue_scriptsincludes\classes\Ajax_Export_Import_Nav_Menu.php:11
actionadmin_enqueue_scriptsmenu-export-import.php:26
Maintenance & Trust

Menu Export Import Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedDec 7, 2024
PHP min version7.2
Downloads1K

Community Trust

Rating80/100
Number of ratings2
Active installs100
Developer Profile

Menu Export Import Developer Profile

Isfaque Sakib

1 plugin · 100 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Menu Export Import

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/menu-export-import/assets/css/style.css/wp-content/plugins/menu-export-import/assets/js/scripts.js/wp-content/plugins/menu-export-import/assets/js/menu-import.js
Script Paths
assets/js/scripts.jsassets/js/menu-import.js
Version Parameters
menu-export-import/style.css?ver=menu-export-import-scripts?ver=menu-export-import-menu-import-ajax?ver=

HTML / DOM Fingerprints

CSS Classes
menu-export-import-rowmenu-export-import-form-wrapmenu-export-import-import-list
Data Attributes
name="menu_export_import_menu_to_export"id="menu-export-import-menu-export-form"name="menu_export_import_nav_menu_export_nonce"name="menu_export_import_export_menus_submit"id="menu-export-import-menu-import-form"name="import_menus_file"+3 more
JS Globals
MENU_EXPORT_IMPORT
FAQ

Frequently Asked Questions about Menu Export Import