cleantalk
Vulnerabilities and Security Researches

Migrate Guru: Migrate & Clone WordPress Free, PSC-2026-64633

PSC, Research URL

PSC-2026-64633

Published on
Mar 27, 2026
Research Description
Migration plugins are security-relevant because they operate with high privilege, touch both the filesystem and the database, and often require sensitive destination details like FTP/cPanel credentials or a migration key. If access control, request integrity, or input/output handling is weak, attackers may trigger unauthorized migrations, leak migration metadata, force configuration changes via CSRF, or abuse migration logic to cause resource exhaustion. Migrate Guru – Site Migration & Cloning version 6.28 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64633, confirming that the plugin was reviewed from a secure code perspective with attention to the most common exploitation paths for site migration and cloning workflows.
Affected versions
Min 6.28, max 6.28.
Status
SAFE & CERTIFIED