Skip to content
PluginCanary

Comments Import & Export

by WebToffee · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 14 Sep 2026, 15 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for Comments Import & Export
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Quick answers

Is Comments Import & Export still maintained?
Yes. Last release 14 Sep 2026, 15 releases in the last 24 months. 14 Sep 2026 · wordpress.org
Who owns Comments Import & Export, and has it changed hands?
No change recorded. Main committer webtoffee since Jul 2018. 3 Nov 2026 · SVN log
Was Comments Import & Export removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Comments Import & Export safe?
8 known vulnerabilities, all fixed (latest in 2.5.4). Not on the exploited list. 15 Sep 2026 · Wordfence Intelligence
Is the latest Comments Import & Export update safe to install?
No ownership change before 2.5.4. No one-star spike after it. 14 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
webtoffee9 Jul 2018 to 14 Sep 2026, 60 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
51 days ago
Releases, 24 months
15
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for Comments Import & Export
Q1 20241
Q2 20241
Q3 20241
Q4 20242
Q1 20250
Q2 20255
Q3 20251
Q4 20252
Q1 20262
Q2 20261
Q3 20263
Q4 20260

Last release 14 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.9.

Rating distribution
5 star64
4 star2
3 star1
2 star0
1 star1

Security record

3 vulnerabilities in 24 months (8 on record), all patched (latest fixed in 2.5.4).

Show 8 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Sep 2026Comments Import & Export 2.1.11 - 2.5.3 - Authenticated (Author+) Information Exposure4.32.1.11 to 2.5.32.5.4Patched before disclosure
20 Mar 2026Comments Import & Export <= 2.4.9 - Missing Authorization4.3<= 2.4.92.5.0Patched before disclosure
2 Jun 2025WordPress Comments Import & Export <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 2.4.32.4.4Patched before disclosure
10 Oct 2024WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal6.5<= 2.3.72.3.9Patched before disclosure
5 Apr 2024WordPress Comments Import & Export <= 2.3.5 - Cross-Site Request Forgery4.3<= 2.3.52.3.6Patched before disclosure
6 Feb 2023WordPress Comments Import & Export <= 2.3.1 - CSV Injection6.1<= 2.3.12.3.2Patched before disclosure
11 Mar 2020WebToffee Plugins <= (Various Versions) - Arbitrary User Creation8.8< 2.1.112.1.11Patched before disclosure
21 Jun 2018WordPress Comments Import & Export <= 2.0.4 - CSV Injection6.1<= 2.0.42.0.5Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Comments Import & Export
4 May 202679
11 May 2026124
18 May 2026110
25 May 20261,088
1 Jun 2026291
8 Jun 2026247
15 Jun 2026201
22 Jun 2026136
29 Jun 2026190
6 Jul 2026240
13 Jul 2026242
20 Jul 2026159
27 Jul 2026145
3 Aug 2026147
10 Aug 2026146
17 Aug 20261,986
24 Aug 2026346
31 Aug 2026255
7 Sep 2026239
14 Sep 20261,348
21 Sep 2026360
28 Sep 2026368
5 Oct 2026306
12 Oct 2026279
19 Oct 2026358
26 Oct 2026313
2 Nov 202655

Weekly downloads over the last 4 weeks are 30% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Disable CommentsScore 93 · 100,000+Disable CommentsScore 91 · 1,000,000+Disqus Comment SystemScore 91 · 30,000+

Facts

Version2.5.4
AuthorWebToffee
Added29 Nov 2016
Last updated14 Sep 2026
Active installs2,000+
Requires WordPress4.6
Tested up to7.1.4
Requires PHP7.0
CategoryE-commerce & Shopping
TagsComments export, comments import, wordpress comments, wordpress comments export., wordpress comments import

Other plugins by this author: Product Import Export for WooCommerce - CSV Product Importer & Exporter, Order Export & Order Import for WooCommerce, WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels, Sequential Order Number for WooCommerce, Export and Import Users and Customers, Smart Coupons For WooCommerce Coupons, WebToffee eCommerce Marketing Automation - Email marketing, Popups, Email customizer, Related Products - Create Upsells, Cross-sells, and Product Recommendations for WooCommerce, WebToffee WP Backup and Migration, mPDF add-on for RTL and Unicode Support, WebToffee WooCommerce Product Feeds - Google Shopping, Pinterest, TikTok Ads, & More, Accessibility Tool Kit: WP Accessibility checker plugin for WCAG, Section 508, ADA, EAA Compliance

Questions

Is Comments Import & Export still maintained?

Yes. Last release 14 Sep 2026, 15 releases in the last 24 months.

Who owns Comments Import & Export, and has it changed hands?

No change recorded. Main committer webtoffee since Jul 2018.

Was Comments Import & Export removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Comments Import & Export safe?

8 known vulnerabilities, all fixed (latest in 2.5.4). Not on the exploited list.

Is the latest Comments Import & Export update safe to install?

No ownership change before 2.5.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue