Movable Type Backup Importer Security & Risk Analysis

wordpress.org/plugins/movable-type-backup-importer

This plugin allows you to import Movable Type backups. It reads the backup XML and creates the correct objects and relations in your Wordpress Blog.

50 active installs v1.1.2 PHP + WP 3.0+ Updated Dec 8, 2011
importimportermovable-typemovabletypemt
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Movable Type Backup Importer Safe to Use in 2026?

Generally Safe

Score 85/100

Movable Type Backup Importer has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 14yr ago
Risk Assessment

The "movable-type-backup-importer" plugin version 1.1.2 presents a generally good security posture with several positive indicators. The absence of known CVEs and a clean vulnerability history are significant strengths, suggesting a history of responsible development. Furthermore, the plugin utilizes prepared statements for all its SQL queries, which is a crucial defense against SQL injection vulnerabilities. The limited attack surface, with no AJAX handlers, REST API routes, shortcodes, or cron events exposed without authentication or proper checks, further enhances its security.

Key Concerns

  • Low output escaping (16%)
  • Taint flow with unsanitized paths
  • No capability checks
Vulnerabilities
None known

Movable Type Backup Importer Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Movable Type Backup Importer Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
21
4 escaped
Nonce Checks
1
Capability Checks
0
File Operations
6
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

16% escaped25 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

2 flows1 with unsanitized paths
import (class-mt-backup-import.php:143)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Movable Type Backup Importer Attack Surface

Entry Points0
Unprotected0
Maintenance & Trust

Movable Type Backup Importer Maintenance & Trust

Maintenance Signals

WordPress version tested3.2.1
Last updatedDec 8, 2011
PHP min version
Downloads13K

Community Trust

Rating100/100
Number of ratings1
Active installs50
Developer Profile

Movable Type Backup Importer Developer Profile

Roger Dudler

1 plugin · 50 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Movable Type Backup Importer

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes
wrapnarrow
Shortcode Output
<h2>Import Movable Type Backup</h2><h3>Choose Backup to Import</h3><h3>Which objects would you like to import?</h3><h3>Upload Backup</h3>
FAQ

Frequently Asked Questions about Movable Type Backup Importer