Skip to content
PluginCanary

WP Import Export Lite

by vjinfotech · 40,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released 54 days ago, tested with WordPress 7.1, no open vulnerabilities.

86/ 100Healthy
Canary Score

Based on 3 of 5 areas

Sub-scores for WP Import Export Lite
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • InfoSEC-314 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 16 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is WP Import Export Lite still maintained?
Yes. Last release 12 Sep 2026, 9 releases in the last 24 months. 12 Sep 2026 · wordpress.org
Who owns WP Import Export Lite, and has it changed hands?
No change recorded. Main committer vjinfotech since Jul 2019. 4 Nov 2026 · SVN log
Was WP Import Export Lite removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP Import Export Lite safe?
16 known vulnerabilities, all fixed (latest in 3.9.35). Not on the exploited list. 17 Sep 2026 · Wordfence Intelligence
Is the latest WP Import Export Lite update safe to install?
No ownership change before 3.9.35. No one-star spike after it. 12 Sep 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master26 Jul 2019 to 26 Jul 2019, 1 commits
vjinfotech27 Jul 2019 to 12 Sep 2026, 212 commits

2 committers recorded. No ownership changes recorded since 2019.

Maintenance

Last release
54 days ago
Releases, 24 months
9
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for WP Import Export Lite
Q1 20240
Q2 20240
Q3 20240
Q4 20241
Q1 20250
Q2 20251
Q3 20252
Q4 20250
Q1 20260
Q2 20262
Q3 20263
Q4 20260

Last release 12 Sep 2026. Tested with WordPress 7.1 (current).

Support

Resolved, last 2 months
100%
Threads, last 2 months
1

Trend appears after 8 weekly snapshots.

Security record

14 vulnerabilities in 24 months (16 on record), all patched (latest fixed in 3.9.35).

Show 16 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
17 Sep 2026Authenticated (Admin+) Privilege Escalation4.7<= 3.9.343.9.35Before disclosure
14 Sep 2026Authenticated (Admin+) SQL Injection4.9<= 3.9.323.9.33Before disclosure
14 Sep 2026Authenticated (Admin+) Path Traversal to Arbitrary Directory Deletion4.9<= 3.9.323.9.33Before disclosure
14 Sep 2026Authenticated (Admin+) Remote Code Execution7.2<= 3.9.333.9.34Before disclosure
14 Sep 2026Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.9.323.9.33Before disclosure
14 Sep 2026Authenticated (Admin+) Arbitrary File Read4.9<= 3.9.323.9.33Before disclosure
14 Sep 2026Authenticated (Admin+) SQL Injection4.9<= 3.9.323.9.33Before disclosure
14 Sep 2026Authenticated (Administrator+) Server-Side Request Forgery5.5<= 3.9.323.9.33Before disclosure
14 Sep 2026Authenticated (Admin+) Arbitrary File Upload7.2<= 3.9.323.9.33Before disclosure
14 Sep 2026Authenticated (Admin+) Remote Code Execution7.2<= 3.9.323.9.33Before disclosure
2 Jul 2026Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter5.5<= 3.9.303.9.31Before disclosure
4 Aug 2025Authenticated (Subscriber+) Arbitrary File Upload7.5<= 3.9.293.9.30Before disclosure
4 Aug 2025Authenticated (Subscriber+) Arbitrary File Upload7.5<= 3.9.283.9.29Before disclosure
21 Apr 2025Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4<= 3.9.273.9.2825
5 Apr 2024Authenticated (Administrator+) PHP Object Injection7.2<= 3.9.263.9.27224
14 Jan 2022Unauthenticated Sensitive Data Disclosure7.5<= 3.9.153.9.16n/a

Changelog mentions of security fixes: 3.9.33 (security, XSS, SQL injection); 3.9.34 (security, escaping, sanitize); 3.9.35 (security, authorization).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.0.

Last 90 days vs lifetime average rating for WP Import Export Lite
Last 90 daysNo reviews
Lifetime4.0
Average rating per quarter
Average rating per quarter for WP Import Export Lite
Q1 20243.0
Q2 20244.0
Q3 20241.0
Q4 20244.2
Q1 20255.0
Q3 20253.7
Q4 20253.0

Average rating stayed at 3.0 between Q1 2024 and Q4 2025.

Rating distribution
5 star81
4 star4
3 star2
2 star1
1 star25
Latest low reviews

Momentum

Active installs
40,000+
Downloads, last full week
2,033
Weekly downloads, last 26 complete weeks
Weekly downloads for WP Import Export Lite
4 May 2026352
11 May 2026952
18 May 2026903
25 May 2026888
1 Jun 2026817
8 Jun 2026924
15 Jun 2026797
22 Jun 20269,932
29 Jun 20266,253
6 Jul 20266,133
13 Jul 20262,478
20 Jul 20262,559
27 Jul 20262,061
3 Aug 20261,842
10 Aug 20261,624
17 Aug 20261,504
24 Aug 20261,608
31 Aug 20261,501
7 Sep 202633,938
14 Sep 20267,702
21 Sep 20264,101
28 Sep 20262,523
5 Oct 20262,067
12 Oct 20261,842
19 Oct 20262,643
26 Oct 20262,033

Weekly downloads over the last 4 weeks are 44% below the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Widget Importer & ExporterScore 95 · 200,000+Customizer Export/ImportScore 95 · 100,000+WP All ExportScore 95 · 100,000+

Facts

Version
3.9.35
Author
vjinfotech
Added
27 Jul 2019
Last updated
12 Sep 2026
Active installs
40,000+
Requires WordPress
4.4
Tested up to
7.1.4
Requires PHP
5.6
Category
Site Administration & Utilities > Site Migration & Cloning
Tags
csv, export, import, migrate, schedule

Questions about WP Import Export Lite

Is WP Import Export Lite still maintained?

Yes. Last release 12 Sep 2026, 9 releases in the last 24 months.

Who owns WP Import Export Lite, and has it changed hands?

No change recorded. Main committer vjinfotech since Jul 2019.

Was WP Import Export Lite removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP Import Export Lite safe?

16 known vulnerabilities, all fixed (latest in 3.9.35). Not on the exploited list.

Is the latest WP Import Export Lite update safe to install?

No ownership change before 3.9.35. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue