WP Smart Import
Healthy: maintained, last release 17 Aug 2026, 7 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is WP Smart Import still maintained?
- Yes. Last release 17 Aug 2026, 7 releases in the last 24 months. 17 Aug 2026 · wordpress.org
- Who owns WP Smart Import, and has it changed hands?
- No change recorded. Main committer xylus since May 2018. 3 Nov 2026 · SVN log
- Was WP Smart Import removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is WP Smart Import safe?
- 6 known vulnerabilities, all fixed (latest in 1.1.4). Not on the exploited list. 21 May 2025 · Wordfence Intelligence
- Is the latest WP Smart Import update safe to install?
- No ownership change before 2.0.0. No one-star spike after it. 25 Jun 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| xylus | 24 May 2018 to 17 Aug 2026, 48 commits |
|---|
1 committer recorded. No ownership change since 2018.
Maintenance
- Last release
- 3 months ago
- Releases, 24 months
- 7
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 2 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 0 |
| Q4 2024 | 3 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 2 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 17 Aug 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 3.9.
| 5 star | 8 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 3 |
| 1 star | 1 |
Security record
2 vulnerabilities in 24 months (6 on record), all patched (latest fixed in 1.1.4).
Show 6 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 21 May 2025 | WP Smart Import <= 1.1.3 - Unauthenticated Local File Inclusion | 9.8 | <= 1.1.3 | 1.1.4 | n/a |
| 3 Jan 2025 | WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scripting | 6.1 | <= 1.1.2 | 1.1.3 | n/a |
| 16 Apr 2024 | WP Smart Import : Import any XML File to WordPress <= 1.0.7 - Authenticated (Author+) Stored Cross-Site Scripting | 6.4 | <= 1.0.7 | 1.1.0 | n/a |
| 25 Mar 2024 | WordPress Importer <= 1.0.4 - Reflected Cross-Site Scripting | 6.1 | <= 1.0.4 | 1.0.5 | n/a |
| 11 Oct 2022 | WordPress Importer: Import any XML File to WordPress <= 1.0.2 - Reflected Cross-Site Scripting | 6.1 | <= 1.0.2 | 1.0.3 | n/a |
| 13 Apr 2021 | WordPress Importer : Import any XML File to WordPress < 1.0.1 - Server-Side Request Forgery | 9.1 | < 1.0.1 | 1.0.1 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
900+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 2.0.0 |
|---|---|
| Author | Xylus Themes |
| Added | 24 May 2018 |
| Last updated | 17 Aug 2026 |
| Active installs | 900+ |
| Requires WordPress | 6.4 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Content Management > Document Management & Downloads |
| Tags | csv, xml, importer, XML Import, wordpress importer |
Other plugins by this author: WP Bulk Delete, Import Social Events, Import Eventbrite Events, WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar, XT Event Widget for Social Events, Event SEO: Event Schema / Structured Data: Google Rich Snippet Schema for Event, Import Meetup Events - Meetup Sync & Event Aggregator for WordPress, Easy Events Calendar : All-in-One Events Calendar with Social Event, Eventbrite, Meetup, Google & iCal Import Support, XT Corporate ToolKit, Xylus Toolkit, XT Feed for LinkedIn, AdRotater Email Ad Reports
Questions
Is WP Smart Import still maintained?
Yes. Last release 17 Aug 2026, 7 releases in the last 24 months.
Who owns WP Smart Import, and has it changed hands?
No change recorded. Main committer xylus since May 2018.
Was WP Smart Import removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is WP Smart Import safe?
6 known vulnerabilities, all fixed (latest in 1.1.4). Not on the exploited list.
Is the latest WP Smart Import update safe to install?
No ownership change before 2.0.0. No one-star spike after it.