PLUGIN SECURITY
Is Wp Migrate Db safe?
Migrate your database. Export full sites including media, themes, and plugins. Find and replace content with support for serialized data.
What this plugin does
- Slug:
wp-migrate-db - Author: WP Engine
- 200000+ active installs
- 84/100 rating (316 reviews on wordpress.org)
- 8332163 all-time downloads
- On WordPress.org since 2009-12-13
cloneexport siteimport sitemigratepush pull
Maintenance status
- Latest known version: 2.7.11
- Last updated: 2026-08-19 5:49pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 5.6+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
2 known CVEs on file for Wp Migrate Db. Reported between 2025 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-49043 | WP Migrate Lite – Migration Made Easy [wp-migrate-db] < 2.7.9 | Cross-Site Request Forgery (CSRF) | Medium 4.7 | < 2.7.9 | 2.7.9 | 2026-06-10 | ✓ fixed in latest |
| CVE-2025-11427 | WP Migrate Lite – Migration Made Easy [wp-migrate-db] < 2.7.7 | Server-Side Request Forgery (SSRF) | Medium 5.8 | < 2.7.7 | 2.7.7 | 2025-11-17 | ✓ fixed in latest |
How to fix it
Keep Wp Migrate Db updated — 2.7.11 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- All-in-One WP Migration and Backup — 5000000+ active installs — 90/100 (7664) — max PHP <8.0
- Yoast Duplicate Post — 3000000+ active installs — 94/100 (538) — max PHP 8.4
- WPvivid — Backup, Migration & Staging — 900000+ active installs — 98/100 (1535) — max PHP <8.0
- Migrate Guru – Site Migration & Cloning — 200000+ active installs — 98/100 (1633)
- Duplicate Menu — 100000+ active installs — 92/100 (104) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.