cleantalk
Vulnerabilities and Security Researches

Widget Importer & Exporter, PSC-2026-65707

PSC, Research URL

PSC-2026-65707

Published on
Sep 25, 2026
Research Description
Widget migration tools process configuration data that can create or update active and inactive widget instances across a WordPress site. Widget Importer & Exporter version 1.6.1 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65707. The review focused on upload handling, JSON data validation, administrator permissions, widget instance import, export output, duplicate detection, unsupported widgets, and developer hooks.
Affected versions
Min 1.6.1, max 1.6.1.
Status
SAFE & CERTIFIED