Vulnerabilities and security researches forwidget-importer-exporter widget-importer-exporter

Sep 25, 2026

PSC, Research URL: PSC-2026-65707
Home page URL: Security reports for Widget Importer & Exporter
Application: Widget Importer & Exporter
Date: Sep 25, 2026
Research Description: Widget migration tools process configuration data that can create or update active and inactive widget instances across a WordPress site. Widget Importer & Exporter version 1.6.1 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65707. The review focused on upload handling, JSON data validation, administrator permissions, widget instance import, export output, duplicate detection, unsupported widgets, and developer hooks.
Affected versions: Min 1.6.1, max 1.6.1.
Status: SAFE & CERTIFIED