Free 1-Click WordPress Migration

Free 1-Click WordPress Migration has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 4 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 4 disclosures.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Unrestricted Upload Of File With Dangerous Type.

Every one of the 4 issues recorded for Free 1-Click WordPress Migration has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by Joshua Provoste. Free 1-Click WordPress Migration is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Free 1-Click WordPress Migration vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2025-3455

1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

4 records
Free 1-Click WordPress Migration banner
Latestv3.1.16

Free 1-Click WordPress Migration

1clickmigration

Author

1clickmigration

4.5(38)
90/100
Last Updated
2026-09-07 (6d ago)
Active Installs
300+
Downloads
29,622
Requires WP
4.0+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2019-07-05 (7y ago)

Backup, restore, and migrate in one click 1-Click Migration backs up a WordPress site, emails you an 8-character restore code, and restores it on a new host or domain. URLs and serialized data update automatically. The live site stays up during backup. Why Choose 1-Click Migration for WordPress Backup & Migration? ✅ One-Click WordPress Backup & Migration – Effortlessly backup and restore your WordPress site with a single click ✅ Seamless WordPress Site Migration – Easily migrate WordPress site to a new host or domain safely and quickly, making any WordPress site transfer a breeze. ✅ Clone WordPress Site for Staging – Instantly clone WordPress site to create WordPress staging plugin environments or development copies. ✅ Zero Downtime WordPress Migration – Ensure your live site remains fully operational throughout the entire WordPress backup and migration process for true zero downtime WordPress migration. ✅ Selective WordPress Backup & Restore – Granularly choose what to backup and restore for your WordPress site: database, plugins, uploads, themes, and more. ✅ Automatic URL & Data Replacement – All URLs and serialized data update automatically when you move WordPress site to a new domain. ✅ Secure Encrypted WordPress Backups – Keep your WordPress backups safe with password protection and military-grade encryption. ✅ Direct WordPress Site Transfer – Perform a swift WordPress site transfer directly server-to-server, avoiding large downloads or uploads. ✅ No 4GB zip cap – Free backups are not limited to a 4GB download. Very large databases may need a higher PHP memory_limit; use selective backup (database / plugins / uploads / themes) when a host is tight on memory. ✅ Easy WordPress Migration for All – Enjoy an intuitive and easy WordPress migration plugin experience for beginners and professionals alike. Perfect for: Migrate WordPress site, complete WordPress backup and restore, create WordPress staging plugin environments, clone WordPress site for development, seamless WordPress site transfer between hosts, or to move WordPress site to a new domain. Your all-in-one free WordPress migration plugin! Learn more: 1ClickMigration.com How WordPress Backup & Migration Works Backup Your WordPress Site: 1. Remove unnecessary themes, plugins, and media files to optimize backup size 2. Optional: Clean your database with Advanced Database Cleaner 3. Deactivate all plugins except 1-Click Migration 4. Enter your email and click Backup Site – typically completes in 10-30 minutes 5. Save the 8-character restore code we email you when the backup completes Migrate & Restore Your WordPress Site: 1. Install WordPress and 1-Click Migration on your new hosting provider 2. Delete any pre-installed plugins from the new site 3. Enter the same email you used for the backup, paste the restore code from your email 4. Click Restore Site to complete your WordPress migration 5. Large sites can use selective restore options for files over 1GB Advanced WordPress Backup & Migration Features Selective Backup & Restore Options: Choose exactly what to backup and migrate: * WordPress Database backup * Plugins backup and migration * Media uploads backup (images, videos, files) * Theme files backup and transfer * Selective restore for large WordPress sites Migration & Backup Management: * Retry Failed Backups – Automatic and manual retry options for WordPress backup * Stop & Reset – Cancel and restart backup or migration process anytime * Large Site Support – Restore WordPress sites over 1GB in sections for better stability * Progress Tracking – Real-time backup and migration progress monitoring WordPress Backup Security & Privacy: * AES-256 encryption applied locally before files leave your server * Secure Amazon S3 cloud storage for WordPress backups * Backups automatically deleted after 48 hours * Restore requires both your email and the 8-character code we send you * GDPR compliant WordPress backup solution Reviews If you love 1-Click Migration, please leave a 5-star review on WordPress.org! Your feedback helps us improve this WordPress migration plugin.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C