Is WordPress Importer Secure?
D
Grade D — Poor
High RiskWordPress Importer receives a Grade D from WP HealthKit's 46-layer security audit, with 344 findings including 2 critical vulnerabilities.
Grade
D
Findings
344
Critical
2
Standards
100/100
Active Installs
2.0M+
Last Audited
47 days ago
What We Found
Missing Capability Checks on Import OperationsCRITICAL
Insufficient File Upload ValidationCRITICAL
Missing Nonce Verification on Step 0-1 TransitionHIGH
Direct Database Query in URL RemappingHIGH
Remote File Fetching Without Content ValidationHIGH
+ 339 more findings in the full report.
Frequently Asked Questions
Is WordPress Importer safe to use?
WordPress Importer receives a Grade D from WP HealthKit's 46-layer security audit, with 344 findings including 2 critical vulnerabilities.
How many vulnerabilities does WordPress Importer have?
WP HealthKit's audit found 344 findings for WordPress Importer: 2 critical, 188 high, and 79 medium severity issues.
What is WordPress Importer's security grade?
WordPress Importer has an overall security grade of D (Poor) based on WP HealthKit's 46-layer security audit.