Skip to content
PluginCanary

XServer Migrator

by XServer · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 30 Sep 2026, 2 releases in 24 months, no unpatched vulnerabilities.

90/ 100 Canary Score
Sub-scores for XServer Migrator
Ownership100
Maintenance100
Security95
Support70
Reputation70

How the score works

Quick answers

Is XServer Migrator still maintained?
Yes. Last release 30 Sep 2026, 2 releases in the last 24 months. 30 Sep 2026 · wordpress.org
Who owns XServer Migrator, and has it changed hands?
No change recorded. Main committer xserverjp since Nov 2018. 4 Nov 2026 · SVN log
Was XServer Migrator removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is XServer Migrator safe?
2 known vulnerabilities, all fixed (latest in 1.6.7). Not on the exploited list. 5 Oct 2026 · Wordfence Intelligence
Is the latest XServer Migrator update safe to install?
No ownership change before 1.6.7. No one-star spike after it. 30 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master20 Nov 2018 to 20 Nov 2018, 1 commits
xserverjp30 Nov 2018 to 30 Sep 2026, 52 commits

2 committers recorded. No ownership change since 2018.

Maintenance

Last release
35 days ago
Releases, 24 months
2
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for XServer Migrator
Q1 20240
Q2 20240
Q3 20242
Q4 20241
Q1 20251
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20261
Q4 20260

Last release 30 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews.

Rating distribution
5 star0
4 star0
3 star0
2 star0
1 star0

Security record

1 vulnerability in 24 months (2 on record), patched (latest fixed in 1.6.7).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
5 Oct 2026XServer Migrator <= 1.6.6 - Unauthenticated Information Exposure5.3<= 1.6.61.6.7Patched before disclosure
29 Apr 2024Xserver Migrator <= 1.6.2 - Cross-Site Request Forgery to Arbitrary File Upload8.8<= 1.6.21.6.2.1n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for XServer Migrator
4 May 2026214
11 May 2026447
18 May 2026491
25 May 2026473
1 Jun 2026502
8 Jun 2026462
15 Jun 2026506
22 Jun 2026615
29 Jun 2026469
6 Jul 2026424
13 Jul 2026401
20 Jul 2026457
27 Jul 2026446
3 Aug 2026442
10 Aug 2026494
17 Aug 2026484
24 Aug 2026459
31 Aug 2026485
7 Sep 2026461
14 Sep 2026496
21 Sep 202693
28 Sep 20264,944
5 Oct 20261,409
12 Oct 2026914
19 Oct 20263,217
26 Oct 20261,808
2 Nov 2026212

Weekly downloads over the last 4 weeks are 90% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

DuplicatorScore 93 · 1,000,000+Migrate GuruScore 93 · 200,000+SiteGround MigratorScore 91 · 80,000+DreamHost Automated MigrationScore 91 · 20,000+Cloudways WordPress MigratorScore 91 · 10,000+

Facts

Version1.6.7
AuthorXServer
Added30 Nov 2018
Last updated30 Sep 2026
Active installs10,000+
Requires WordPress4.2.29
Tested up to7.1.4
Requires PHPnot stated
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsxserver

Other plugins by this author: CloudSecure WP Security, TypeSquare Webfonts for エックスサーバー

Questions

Is XServer Migrator still maintained?

Yes. Last release 30 Sep 2026, 2 releases in the last 24 months.

Who owns XServer Migrator, and has it changed hands?

No change recorded. Main committer xserverjp since Nov 2018.

Was XServer Migrator removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is XServer Migrator safe?

2 known vulnerabilities, all fixed (latest in 1.6.7). Not on the exploited list.

Is the latest XServer Migrator update safe to install?

No ownership change before 1.6.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue