Skip to content
PluginCanary

WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets

by WP All Import · 100,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: 5 vulnerabilities published in the last 24 months.

82/ 100 Canary Score
Sub-scores for WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets
Ownership100
Maintenance100
Security65
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
soflyy24 Jul 2012 to 8 Aug 2023, 245 commits
WPAllImport17 Mar 2021 to 23 Jan 2025, 20 commits
solideiglor3 Apr 2025 to 20 Oct 2026, 17 commits
ix35 Dec 2025 to 5 Dec 2025, 1 commits

4 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
15 days ago
Releases, 24 months
15
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets
Q1 20241
Q2 20242
Q3 20242
Q4 20241
Q1 20251
Q2 20253
Q3 20253
Q4 20252
Q1 20261
Q2 20261
Q3 20261
Q4 20263

Last release 20 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
26 Jun 2026WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets <= 4.0.1 - Authenticated (Administrator+) SQL Injection4.9<= 4.0.14.1.00
5 Mar 2026WP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath'6.1<= 4.0.04.0.10
12 Nov 2025Import any XML, CSV or Excel File to WordPress (WP All Import) <= 3.9.6 - Authenticated (Administrator+) Remote Code Execution via Conditional Logic8.8<= 3.9.64.0.00
9 Sep 2025Import any XML, CSV or Excel File to WordPress <= 3.9.3 - Authenticated (Admin+) Limited Unsafe File Upload7.2<= 3.9.33.9.40
7 Apr 2025Advanced Contact form 7 DB <= 2.0.8 & Import any XML, CSV or Excel File to WordPress <= 3.8.0 - Use of Vulnerable Component (PHPExcel)3.7<= 3.8.03.9.00
10 Apr 2024Import any XML or CSV File to WordPress <= 3.7.3 - Cross-Site Request Forgery to Notice Dismissal4.3<= 3.7.33.7.40
29 Dec 2023Import any XML or CSV File <= 3.7.2 - Authenticated (Admin+) Arbitrary File Upload7.2< 3.7.33.7.30
17 Oct 2022Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload via Path Traversal6.5<= 3.6.83.6.90
17 Oct 2022Import any XML or CSV File to WordPress <= 3.6.8 - Authenticated (Administrator+) Arbitrary File Upload6.5<= 3.6.83.6.90
1 Jul 2022WP All Import <= 3.6.7 - Admin+ Arbitrary File Upload4.8<= 3.6.73.6.80
30 Jun 2022Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload7.2<= 3.6.73.6.80
28 Jun 2022WP All Import <= 3.6.7 - Authenticated (Administrator+) Arbitrary Code Execution9.1<= 3.6.73.6.81
2 Jun 2022Import any XML or CSV File to WordPress <= 3.6.6 - Reflected Cross-Site Scripting6.1<= 3.6.63.6.70
2 Nov 2021Import any XML or CSV File to WordPress <= 3.6.2 - Authenticated Stored Cross-Site Scripting4.8< 3.6.33.6.30
19 Feb 2020Import any XML or CSV File to WordPress <= 3.2.4 - SQL Injection7.2<= 3.2.43.2.50
19 Feb 2020Import any XML or CSV File to WordPress <= 3.2.4 - Missing Authorization and Cross-Site Request Forgery Checks6.3<= 3.2.43.2.50
20 Aug 2019Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks7.5< 3.2.43.2.40
8 Mar 2018WP All Import <= 3.4.5 - Cross-Site Scripting6.1< 3.4.63.4.60
8 Mar 2018WP All Import <= 3.4.6 - Cross-Site Scripting6.1< 3.4.73.4.70
7 Mar 2018Import any XML or CSV File to WordPress <= 3.4.6 - Cross-Site Scripting6.1< 3.4.73.4.70
8 Oct 2017Import any XML or CSV File to WordPress <= 3.4.5 - Cross-Site Scripting6.1< 3.4.63.4.61
12 Mar 2015Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection9.8< 3.2.53.2.51
26 Feb 2015Import any XML or CSV File to WordPress <= 3.2.4 - Reflected Cross-Site Scripting6.1<= 3.2.43.2.515

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets
Q4 20254.1
Q1 20264.2
Q2 20265.0
Q3 20265.0
Q4 20264.4

Average rating rose from 4.1 to 4.4 between Q4 2025 and Q4 2026.

Rating distribution
5 star1794
4 star30
3 star11
2 star11
1 star120
Latest low reviews

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets
4 May 20263,052
11 May 20266,402
18 May 20266,203
25 May 20265,931
1 Jun 20265,532
8 Jun 202642,353
15 Jun 202612,746
22 Jun 202610,864
29 Jun 20269,852
6 Jul 202612,439
13 Jul 202649,030
20 Jul 202613,471
27 Jul 20269,505
3 Aug 20267,962
10 Aug 20266,596
17 Aug 20266,400
24 Aug 20266,660
31 Aug 20266,231
7 Sep 20265,602
14 Sep 20265,474
21 Sep 20265,714
28 Sep 202641,891
5 Oct 202656,039
12 Oct 202610,567
19 Oct 202649,546
26 Oct 202619,313
2 Nov 20261,844

Weekly downloads over the last 4 weeks are 31% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

WP All Export - Drag & Drop Export to Any Custom CSV, XML & ExcelScore 92 · 100,000+Widget Importer & ExporterScore 91 · 200,000+WP All Import - Import Add-On for ACFScore 91 · 50,000+Export media with selected content (by DKZR)Score 91 · 40,000+WP All Import - Import SEO Settings for Yoast SEOScore 91 · 20,000+

Facts

Version4.1.4
AuthorWP All Import
Added24 Jul 2012
Last updated20 Oct 2026
Active installs100,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.4
CategorySite Administration & Utilities > Site Migration & Cloning
Tagscsv, xml, datafeed, wordpress csv import, wordpress xml import

Other plugins by this author: WP All Import - Import Add-On for ACF, WP All Import - Import SEO Settings for Yoast SEO, WP All Export - Export Add-On for ACF, Import Users from CSV, WP All Export - Product Export Add-On for WooCommerce, WP All Import - Import SEO Settings for Rank Math SEO, WP All Export - User Export Add-On, WP All Import - User Import Add-On, WP All Export - Order Export for WooCommerce, WP All Import - Job Listing Import for WP Job Manager, WP All Import - Import SEO Settings for All In One SEO, WP All Import - Property Import for RealHomes

Questions

Is WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets still maintained?

WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets was last updated on 20 Oct 2026. Its Canary status is Healthy.

Is WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets safe?

WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets?

The wordpress.org author is WP All Import. Recent committers: solideiglor, ix3, WPAllImport, soflyy, plugin-master. We have recorded no ownership change.

What can I use instead of WP All Import - Drag & Drop Import for CSV, XML, Excel & Google Sheets?

Plugins in the same category with a higher Canary Score: WP All Export - Drag & Drop Export to Any Custom CSV, XML & Excel, Widget Importer & Exporter, WP All Import - Import Add-On for ACF, Export media with selected content (by DKZR), WP All Import - Import SEO Settings for Yoast SEO.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue