[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feazQy1iOB23UFKb2JXZ2CupAlGUmLVhzlZ9toAEk4S4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":22,"download_link":23,"security_score":24,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":37,"analysis":149,"fingerprints":285},"tumblr-importer","Tumblr Importer","1.2","Samuel Wood (Otto)","https:\u002F\u002Fprofiles.wordpress.org\u002Fotto42\u002F","\u003Cp>Imports a Tumblr blog into a WordPress blog.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Correctly handles post formats\u003C\u002Fli>\n\u003Cli>Background importing: start it up, then come back later to see how far it’s gotten\u003C\u002Fli>\n\u003Cli>Duplicate checking, will not create duplicate imported posts\u003C\u002Fli>\n\u003Cli>Imports posts, drafts, and pages\u003C\u002Fli>\n\u003Cli>Media Side loading (for audio, video, and image posts)\u003C\u002Fli>\n\u003C\u002Ful>\n","Imports a Tumblr blog into a WordPress blog.",10000,917097,80,48,"2025-01-06T18:25:00.000Z","6.7.5","3.2","",[20,21],"import","tumblr","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ftumblr-importer\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftumblr-importer.1.2.zip",92,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":32,"avg_security_score":33,"avg_patch_time_days":34,"trust_score":35,"computed_at":36},"otto42",9,166640,87,3759,70,"2026-04-04T14:46:31.956Z",[38,56,81,103,128],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":25,"num_ratings":25,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":18,"tags":51,"homepage":18,"download_link":54,"security_score":55,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"selective-importers","Selective Importers","1.0","Stephanie Leary","https:\u002F\u002Fprofiles.wordpress.org\u002Fsillybean\u002F","\u003Cp>Allows you to import only selected content from WordPress, Blogger, or Tumblr sites. From the Pending Imports queue, you can select which posts to import, and which content type they should become (posts, pages, or any custom post type).\u003C\u002Fp>\n\u003Cp>Sponsored by \u003Ca href=\"http:\u002F\u002Fpressbooks.com\u002Fabout\u002F\" rel=\"nofollow ugc\">PressBooks\u003C\u002Fa>.\u003C\u002Fp>\n","Importers that put the incoming content into a queue, where you can select which posts to import.",10,2157,"2012-06-21T19:02:00.000Z","3.4.2","3.3",[52,20,53,21],"blogger","importer","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fselective-importers.1.0.zip",85,{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":66,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":50,"requires_php":70,"tags":71,"homepage":77,"download_link":78,"security_score":66,"vuln_count":79,"unpatched_count":25,"last_vuln_date":80,"fetched_at":27},"all-in-one-wp-migration","All-in-One WP Migration and Backup","7.102","ServMask","https:\u002F\u002Fprofiles.wordpress.org\u002Fservmask\u002F","\u003Cp>\u003Cstrong>The Most Trusted WordPress Migration & Backup Plugin Since 2013\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>All-in-One WP Migration is the gold standard for WordPress site migration and backup, used by over 60 million websites worldwide – from small blogs to Fortune 500 companies and government agencies. Whether you need to migrate WordPress to a new host, create a full site backup, or restore a previous backup, our plugin offers enterprise-grade reliability with beginner-friendly simplicity.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose All-in-One WP Migration?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Effortless Migration\u003C\u002Fstrong>: Migrate your entire site with a single click – including database, media, themes, and plugins\u003C\u002Fli>\n\u003Cli>\u003Cstrong>One-Click Backup\u003C\u002Fstrong>: Create a complete WordPress backup before you migrate, so you can restore anytime\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Zero Downtime\u003C\u002Fstrong>: Complete your migration with no service interruptions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Universal Compatibility\u003C\u002Fstrong>: Migrate between any hosting providers – from budget shared hosting to high-end dedicated servers\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Technical Excellence\u003C\u002Fstrong>: Engineered for reliability with memory-efficient processing (512KB chunks), ideal for resource-limited environments\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No Technical Skills Required\u003C\u002Fstrong>: Intuitive interface lets anyone migrate or backup a WordPress site without technical expertise\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cross-Database Support\u003C\u002Fstrong>: Migrate seamlessly between MySQL, MariaDB, and SQLite databases\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Secure & Reliable\u003C\u002Fstrong>: Trusted by Boeing, NASA, Harvard, Stanford, Automattic, and government agencies worldwide\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How to Migrate WordPress – Simple as 1-2-3:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Cstrong>Install\u003C\u002Fstrong> the migration plugin on your source and destination sites\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Backup & Export\u003C\u002Fstrong> your site to a .wpress backup file with one click\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Import & Migrate\u003C\u002Fstrong> using our drag-and-drop importer on your destination site\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>For Developers & Power Users:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Advanced Find & Replace\u003C\u002Fstrong>: Control exactly what changes when you migrate\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Selective Migration & Backup\u003C\u002Fstrong>: Include or exclude specific content types from your migration or backup\u003C\u002Fli>\n\u003Cli>\u003Cstrong>PHP 5.3-8.4 Compatibility\u003C\u002Fstrong>: Works across virtually all hosting environments\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom WPress Format\u003C\u002Fstrong>: Our optimized archive format ensures data integrity\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hook System\u003C\u002Fstrong>: Extensive API for custom integration and workflows\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Command-Line Support\u003C\u002Fstrong>: Automate migrations and backups via WP-CLI\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Premium Extensions:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Enhance your migration and backup workflow with our \u003Ca href=\"https:\u002F\u002Fservmask.com\u002Fproducts\" rel=\"nofollow ugc\">premium extensions\u003C\u002Fa>:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Unlimited Migration Size\u003C\u002Fstrong>: Migrate sites of any size with no file limits\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Cloud Backup & Migration\u003C\u002Fstrong>: Backup and migrate directly to\u002Ffrom Dropbox, Google Drive, OneDrive, and more\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multisite Migration\u003C\u002Fstrong>: Migrate complex WordPress multisite networks\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Scheduled Backups\u003C\u002Fstrong>: Automated, recurring WordPress backups on your schedule\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Database Filtering\u003C\u002Fstrong>: Exclude specific tables or data from your migration or backup\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Features Spotlight:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WCAG 2.1 AA Level accessibility compliance\u003C\u002Fli>\n\u003Cli>Mobile-responsive interface\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ftraktor.servmask.com\" rel=\"nofollow ugc\">Browse WPRESS files online\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Ftraktor.wp-migration.com\" rel=\"nofollow ugc\">extract locally\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Automatic URL and path replacement during migration\u003C\u002Fli>\n\u003Cli>WordPress Playground integration – migrate between SQLite and MySQL\u003C\u002Fli>\n\u003Cli>Regular bi-weekly updates ensuring your backup and migration plugin stays compatible\u003C\u002Fli>\n\u003Cli>Available in 50+ languages including Japanese\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Trusted by the Government and Big Corporations:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Many enterprise customers, government organizations, and universities use, love, and trust All-in-One WP Migration. Here are some: Boeing, NASA, VW, IBM, Harvard University, Stanford University, Lego, P&G, Automattic, State of California, State of Hawaii.\u003Cbr \u002F>\nThis broad adoption demonstrates how \u003Cstrong>safe, reliable and adaptable\u003C\u002Fstrong> this WordPress migration and backup plugin is for any website migration need.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Update Frequency:\u003C\u002Fstrong>\u003Cbr \u002F>\nOur team is dedicated to keeping this WordPress migration and backup plugin up-to-date and secure. We release updates every two weeks or at least once a month, ensuring your migration and backup workflows remain compatible with the latest WordPress versions, including beta releases. Our proactive testing and feedback to the WordPress core team help in preemptively addressing any potential issues, so you can always migrate and backup with confidence.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Full Compatibility and Support:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>All-in-One WP Migration has been extensively tested and confirmed to be compatible with most WordPress plugins and themes, so you can migrate and backup without worrying about conflicts.\u003Cbr \u002F>\nThis means you don’t experience cross-plugin compatibility issues that can slow down or break your WordPress site when you migrate.\u003Cbr \u002F>\nAll-in-One WP Migration has partnered with multiple theme and plugin vendors to distribute their products with us as a single, easy-to-install migration and backup package.\u003Cbr \u002F>\nThese vendors trust our migration plugin to provide their customers with reliable product delivery, support, migrations, and backups.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Cloud Storage Supported:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>All-in-One WP Migration supports backup and migration to all major cloud storage services.\u003Cbr \u002F>\nThe plugin comes preinstalled on all Bitnami WordPress sites running on AWS, Google Compute Cloud, and Microsoft Azure – ready to migrate and backup out of the box.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Case Studies:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Small Business Migration: A small online retailer used All-in-One WP Migration to migrate to a more robust hosting solution, creating a full backup before the migration and completing the move without downtime during peak shopping season.\u003C\u002Fli>\n\u003Cli>Educational Migration: A prominent university utilized All-in-One WP Migration to migrate and consolidate multiple departmental sites into a single WordPress network, with automated backups ensuring no data was lost during migration.\u003C\u002Fli>\n\u003Cli>Government Migration: Following a directive to improve digital accessibility, a government agency used our migration plugin to migrate their content to a new, compliant platform without impacting public access to critical information.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Contact us\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpatchstack.com\u002Fdatabase\u002Fvdp\u002Fall-in-one-wp-migration\" rel=\"nofollow ugc\">Report a security vulnerability\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fservmask.com\u002Fhelp\" rel=\"nofollow ugc\">Get free help from us here\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fservmask.com\u002Fhelp\" rel=\"nofollow ugc\">Report a bug or request a feature\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fservmask.com\" rel=\"nofollow ugc\">Find out more about us\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FBpWxCeUWBOk?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FmRp7qTFYKgs?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>All-in-One WP Migration is designed to fully respect and protect the personal information of its users. It asks for your consent to collect the user’s email address when filling the plugin’s contact form.\u003Cbr \u002F>\nAll-in-One WP Migration is in full compliance with General Data Protection Regulation (GDPR).\u003Cbr \u002F>\nSee our \u003Ca href=\"https:\u002F\u002Fwww.iubenda.com\u002Fprivacy-policy\u002F946881\" rel=\"nofollow ugc\">GDPR Compliant Privacy Policy here\u003C\u002Fa>.\u003C\u002Fp>\n","Trusted by 60M+ sites: The gold standard for WordPress migration and backup. Migrate, backup, and restore your WordPress site with one click.",5000000,172689108,90,7624,"2026-02-28T01:37:00.000Z","6.9.4","5.3",[72,73,74,75,76],"backup","clone","export-import","migrate","move-wordpress","https:\u002F\u002Fservmask.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fall-in-one-wp-migration.7.102.zip",13,"2025-08-26 10:28:31",{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":89,"downloaded":90,"rating":91,"num_ratings":92,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":96,"tags":97,"homepage":98,"download_link":99,"security_score":100,"vuln_count":101,"unpatched_count":25,"last_vuln_date":102,"fetched_at":27},"wordpress-importer","WordPress Importer","0.9.5","WordPress.org","https:\u002F\u002Fprofiles.wordpress.org\u002Fwordpressdotorg\u002F","\u003Cp>The WordPress Importer will import the following content from a WordPress export file:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Posts, pages and other custom post types\u003C\u002Fli>\n\u003Cli>Comments and comment meta\u003C\u002Fli>\n\u003Cli>Custom fields and post meta\u003C\u002Fli>\n\u003Cli>Categories, tags and terms from custom taxonomies and term meta\u003C\u002Fli>\n\u003Cli>Authors\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For further information and instructions please see the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Farticle\u002Fimporting-content\u002F#wordpress\" rel=\"ugc\">documention on Importing Content\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Filters\u003C\u002Fh3>\n\u003Cp>The importer has a couple of filters to allow you to completely enable\u002Fblock certain features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>import_allow_create_users\u003C\u002Fcode>: return false if you only want to allow mapping to existing users\u003C\u002Fli>\n\u003Cli>\u003Ccode>import_allow_fetch_attachments\u003C\u002Fcode>: return false if you do not wish to allow importing and downloading of attachments\u003C\u002Fli>\n\u003Cli>\u003Ccode>import_attachment_size_limit\u003C\u002Fcode>: return an integer value for the maximum file size in bytes to save (default is 0, which is unlimited)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>There are also a few actions available to hook into:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>import_start\u003C\u002Fcode>: occurs after the export file has been uploaded and author import settings have been chosen\u003C\u002Fli>\n\u003Cli>\u003Ccode>import_end\u003C\u002Fcode>: called after the last output from the importer\u003C\u002Fli>\n\u003C\u002Ful>\n","Import posts, pages, comments, custom fields, categories, tags and more from a WordPress export file.",2000000,67675749,62,315,"2025-11-05T22:53:00.000Z","6.8.5","5.2","7.2",[53],"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwordpress-importer\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwordpress-importer.0.9.5.zip",98,1,"2025-03-25 00:00:00",{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":111,"downloaded":112,"rating":113,"num_ratings":114,"last_updated":115,"tested_up_to":94,"requires_at_least":116,"requires_php":117,"tags":118,"homepage":123,"download_link":124,"security_score":125,"vuln_count":126,"unpatched_count":25,"last_vuln_date":127,"fetched_at":27},"one-click-demo-import","One Click Demo Import","3.4.0","Syed Balkhi","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmub\u002F","\u003Cp>The best feature of this plugin is, that theme authors can define import files in their themes and so all you (the user of the theme) have to do is click on the “Import Demo Data” button.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Are you a theme author?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Setup One Click Demo Imports for your theme and your users will thank you for it!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Focdi.com\u002Fquick-integration-guide\u002F\" rel=\"nofollow ugc\">Follow this easy guide on how to setup this plugin for your themes!\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Are you a theme user?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Contact the author of your theme and \u003Ca href=\"https:\u002F\u002Focdi.com\u002Fask-your-theme-author\u002F\" rel=\"nofollow ugc\">let them know about this plugin\u003C\u002Fa>. Theme authors can make any theme compatible with this plugin in 15 minutes and make it much more user-friendly.\u003C\u002Fp>\n\u003Cp>“\u003Ca href=\"https:\u002F\u002Focdi.com\u002Fask-your-theme-author\u002F#how-can-you-contact-your-theme-author\" rel=\"nofollow ugc\">Where can I find the theme author contact?\u003C\u002Fa>“\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>Please take a look at our \u003Ca href=\"https:\u002F\u002Focdi.com\u002Fuser-guide\u002F\" rel=\"nofollow ugc\">plugin documentation\u003C\u002Fa> for more information on how to import your demo content.\u003C\u002Fp>\n\u003Cp>This plugin is using the modified version of the improved WP import 2.0 that is still in development and can be found here: https:\u002F\u002Fgithub.com\u002Fhumanmade\u002FWordPress-Importer.\u003C\u002Fp>\n\u003Cp>NOTE: There is no setting to “connect” authors from the demo import file to the existing users in your WP site (like there is in the original WP Importer plugin). All demo content will be imported under the current user.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Do you want to contribute?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Please refer to our official \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fawesomemotive\u002Fone-click-demo-import\" rel=\"nofollow ugc\">GitHub repository\u003C\u002Fa>.\u003C\u002Fp>\n","Import your demo content, widgets and theme settings with one click. Theme authors! Enable simple theme demo import for your users.",1000000,19902961,86,79,"2025-09-11T09:36:00.000Z","5.5","7.4",[119,20,120,121,122],"content","settings","theme-options","widgets","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fone-click-demo-import\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fone-click-demo-import.3.4.0.zip",97,2,"2024-05-07 00:00:00",{"slug":129,"name":130,"version":131,"author":132,"author_profile":133,"description":134,"short_description":135,"active_installs":136,"downloaded":137,"rating":138,"num_ratings":139,"last_updated":140,"tested_up_to":69,"requires_at_least":141,"requires_php":142,"tags":143,"homepage":146,"download_link":147,"security_score":148,"vuln_count":25,"unpatched_count":25,"last_vuln_date":26,"fetched_at":27},"widget-importer-exporter","Widget Importer & Exporter","1.6.1","Steven Gliebe","https:\u002F\u002Fprofiles.wordpress.org\u002Fstevengliebe\u002F","\u003Cp>Widget Importer & Exporter is useful for moving widgets from one WordPress site to another, backing up widgets and for theme developers to give users sample widgets. See the \u003Ca href=\"https:\u002F\u002Fchurchthemes.com\u002Fplugins\u002Fwidget-importer-exporter\u002F\" rel=\"nofollow ugc\">details\u003C\u002Fa> on ChurchThemes.com.\u003C\u002Fp>\n\u003Ch4>Importing\u003C\u002Fh4>\n\u003Cp>Importing is done by uploading an export file created by the plugin. The results of an import are shown in a nicely formatted table with an explanation of what happened with each widget area and widget.\u003C\u002Fp>\n\u003Cp>Importation takes into consideration widget areas not existing in the current theme (widgets imported as \u003Cem>Inactive\u003C\u002Fem>), widgets that already exist in the same widget area (widgets not duplicated) and widgets that are not supported by the site (widgets not imported).\u003C\u002Fp>\n\u003Ch4>Exporting\u003C\u002Fh4>\n\u003Cp>Widget Importer & Exporter can create an export file (in JSON format with .wie extension) out of currently active widgets. This file can be imported into other sites using this plugin or used to restore widgets to the same site later.\u003C\u002Fp>\n\u003Ch4>Developers\u003C\u002Fh4>\n\u003Cp>The \u003Ccode>wie_before_import\u003C\u002Fcode> action fires after a file is uploaded but before the data is imported. \u003Ccode>wie_after_import\u003C\u002Fcode> fires after the data is imported. The \u003Ccode>wie_import_data\u003C\u002Fcode> filter can be used to filter data before it is imported. Other filters are used throughout. Make a pull request on GitHub if you need another hook.\u003C\u002Fp>\n\u003Cp>Please jump on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fchurchthemes\u002Fwidget-importer-exporter\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa> to report issues and follow development.\u003C\u002Fp>\n","Import and export your widgets.",200000,5278666,94,117,"2025-12-01T16:14:00.000Z","3.5","5.2.4",[144,20,53,145,122],"exporter","widget","https:\u002F\u002Fchurchthemes.com\u002Fplugins\u002Fwidget-importer-exporter\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwidget-importer-exporter.1.6.1.zip",100,{"attackSurface":150,"codeSignals":204,"taintFlows":222,"riskAssessment":274,"analyzedAt":284},{"hooks":151,"ajaxHandlers":199,"restRoutes":200,"shortcodes":201,"cronEvents":202,"entryPointCount":25,"unprotectedCount":25},[152,157,162,166,170,174,178,181,186,190,195],{"type":153,"name":154,"callback":154,"file":155,"line":156},"action","tumblr_importer_metadata","src\\class-tumblr-import.php",49,{"type":158,"name":159,"callback":160,"file":155,"line":161},"filter","tumblr_importer_format_post","filter_format_post",50,{"type":158,"name":163,"callback":164,"file":155,"line":165},"tumblr_importer_get_consumer_key","get_consumer_key",51,{"type":158,"name":167,"callback":168,"priority":46,"file":155,"line":169},"wp_insert_post_empty_content","filter_allow_empty_content",52,{"type":158,"name":171,"callback":172,"file":155,"line":173},"tumblr_importer_import_instructions","instructions",56,{"type":158,"name":175,"callback":176,"file":155,"line":177},"tumblr_post_type","get_draft_post_type",729,{"type":158,"name":175,"callback":179,"file":155,"line":180},"get_queued_post_type",797,{"type":158,"name":182,"callback":183,"file":184,"line":185},"cron_schedules","importer_schedule","src\\class-wp-importer-cron.php",30,{"type":153,"name":187,"callback":188,"file":184,"line":189},"wp_cron_importer_hook","importer_callback",33,{"type":153,"name":191,"callback":192,"file":193,"line":194},"admin_notices","closure","tumblr-importer.php",23,{"type":153,"name":196,"callback":197,"file":193,"line":198},"init","tumblr_importer_init",68,[],[],[],[203],{"hook":187,"callback":187,"file":184,"line":13},{"dangerousFunctions":205,"sqlUsage":206,"outputEscaping":208,"fileOperations":101,"externalRequests":219,"nonceChecks":220,"capabilityChecks":25,"bundledLibraries":221},[],{"prepared":25,"raw":25,"locations":207},[],{"escaped":209,"rawEcho":210,"locations":211},22,3,[212,215,217],{"file":155,"line":213,"context":214},105,"raw output",{"file":155,"line":216,"context":214},109,{"file":155,"line":218,"context":214},123,5,4,[],[223],{"entryPoint":224,"graph":225,"unsanitizedCount":210,"severity":273},"\u003Cclass-tumblr-import> (src\\class-tumblr-import.php:0)",{"nodes":226,"edges":264},[227,232,238,241,246,249,253,256,259,262],{"id":228,"type":229,"label":230,"file":155,"line":231},"n0","source","$_POST (x2)",428,{"id":233,"type":234,"label":235,"file":155,"line":236,"wp_function":237},"n1","sink","wp_remote_post() [SSRF]",1128,"wp_remote_post",{"id":239,"type":229,"label":240,"file":155,"line":231},"n2","$_POST",{"id":242,"type":234,"label":243,"file":155,"line":244,"wp_function":245},"n3","wp_remote_get() [SSRF]",1555,"wp_remote_get",{"id":247,"type":229,"label":240,"file":155,"line":248},"n4",853,{"id":250,"type":251,"label":252,"file":155,"line":248},"n5","transform","→ fetch_pages()",{"id":254,"type":234,"label":235,"file":155,"line":255,"wp_function":237},"n6",1400,{"id":257,"type":229,"label":230,"file":155,"line":258},"n7",1140,{"id":260,"type":251,"label":261,"file":155,"line":258},"n8","→ oauth_get_request()",{"id":263,"type":234,"label":243,"file":155,"line":244,"wp_function":245},"n9",[265,267,268,270,271,272],{"from":228,"to":233,"sanitized":266},true,{"from":239,"to":242,"sanitized":266},{"from":247,"to":250,"sanitized":269},false,{"from":250,"to":254,"sanitized":269},{"from":257,"to":260,"sanitized":269},{"from":260,"to":263,"sanitized":269},"medium",{"summary":275,"deductions":276},"The tumblr-importer v1.2 plugin exhibits a generally good security posture, with no known vulnerabilities in its history and a commendable approach to handling SQL queries using prepared statements. The static analysis reveals a minimal attack surface, with no AJAX handlers, REST API routes, or shortcodes directly exposed without authentication.  This suggests a conscious effort to limit potential entry points for attackers. However, there are areas that warrant attention. The presence of one cron event, while not directly an entry point for external attacks, requires careful scrutiny to ensure it doesn't introduce vulnerabilities.  Furthermore, while most output is properly escaped (88%), the remaining 12% could potentially lead to cross-site scripting (XSS) vulnerabilities if the unescaped data originates from untrusted sources.\n\nThe taint analysis identified one flow with unsanitized paths, which is a critical concern even without a high or critical severity rating in the immediate analysis. This indicates a potential for path traversal or file manipulation vulnerabilities, especially given the single file operation detected. The absence of capability checks is a notable weakness. While the attack surface is currently limited and protected by nonces, any future expansion or modifications to how this cron event is triggered or interacted with could pose a risk if proper authorization is not enforced.  The plugin's lack of recorded vulnerabilities is a positive sign, but the taint analysis result and unescaped output suggest that the plugin is not entirely free from risk.\n\nIn conclusion, tumblr-importer v1.2 has strengths in its limited attack surface and secure SQL practices. However, the taint analysis indicating an unsanitized path and the less-than-perfect output escaping present potential security risks that should be addressed. The lack of capability checks is a concerning omission that could be exploited if new entry points are introduced or existing ones are modified. Continued vigilance and proactive code review are recommended.",[277,279,281],{"reason":278,"points":46},"Taint flow with unsanitized paths",{"reason":280,"points":220},"Unescaped output detected",{"reason":282,"points":283},"No capability checks",8,"2026-03-16T17:43:38.682Z",{"wat":286,"direct":297},{"assetPaths":287,"generatorPatterns":291,"scriptPaths":292,"versionParams":293},[288,289,290],"\u002Fwp-content\u002Fplugins\u002Ftumblr-importer\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Ftumblr-importer\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Ftumblr-importer\u002Fjs\u002Fadmin.js",[],[290],[294,295,296],"tumblr-importer\u002Fcss\u002Fadmin.css?ver=","tumblr-importer\u002Fcss\u002Fstyle.css?ver=","tumblr-importer\u002Fjs\u002Fadmin.js?ver=",{"cssClasses":298,"htmlComments":300,"htmlAttributes":301,"restEndpoints":303,"jsGlobals":304,"shortcodeOutput":306},[299],"tumblr-importer-error",[],[302],"data-tumblr-import-nonce",[],[305],"tumblr_importer_strings",[]]