Migrate Guru – Site Migration & Cloning
Migrate Guru – Site Migration & Cloning has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Uncontrolled Resource Consumption, behind 1 of the records (100%).
The one issue recorded for Migrate Guru – Site Migration & Cloning has a vendor fix available, so running the current release closes it.
All of these findings were reported by Ananda Dhakal. Migrate Guru – Site Migration & Cloning is installed on roughly 200,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-84778Migrate Guru – Site Migration & Cloning <= 6.65 - Unauthenticated Denial of Service
Read the full analysisVulnerability Records

Migrate Guru – Site Migration & Cloning
Author
migrateguru
Migrate Guru is a powerful WordPress migration plugin designed to seamlessly transfer your WordPress site to a new host or domain. Whether you need to clone, move, or migrate your WordPress website, Migrate Guru ensures a hassle-free process with its one-click migration feature. This plugin supports all-in-one WP migrations, handling large sites up to 200 GB without overloading your server. Compatible with every major web host and equipped with automatic URL rewriting and serialized data handling, it’s the go-to tool for moving WordPress sites to new domains or hosts. Move, clone, or migrate your WordPress site with Migrate Guru—the smart, swift, and secure WordPress migrator and backup plugin. CHECKOUT Migrate Guru in Action TOP FEATURES One-Click Migration Effortlessly move WordPress sites 80% faster with a single click, migrating 1 GB in under 30 minutes. No Site Overload Migrate Guru uses its own servers, preventing site crashes. Optimized for Large Sites Easily migrate WordPress sites up to 200 GB, overcoming live-site server limits. No Add-Ons Required Seamlessly handle multi-sites and serialized data without extra plugins. No Storage Needed Temporary copies are removed post-migration. Universal Compatibility Compatible with all web hosts, making transfers simple. Automated Search & Replace Accurate search and replace for serialized data. Real-Time Alerts Receive real-time and email alerts on migration status. DISCLAIMER Currently we don’t support: Local host migrations Migration of multi-site network sub-sites to a different domain or migration of a site to multi-site network subdivision. HOW TO PERFORM A MIGRATION Install Migrate Guru on the site you want to clone. Install WordPress on the destination. Choose the destination web host that you want to clone your website to, enter details. Click ‘Migrate’. PROUD MIGRATION PARTNERS of Cloudways, Pantheon and DreamHost SUPPORTS ALL 5,000+ WEB HOSTS AROUND THE WORLD Pantheon, LiquidWeb, Cloudways, Savvii, DigitalOcean, Hostgator, Godaddy, Bluehost, SiteGround, Kinsta, AWS, Pressable, Webhostingtalk, Inmotion Hosting, Softlayer, Reverbnation, Homestead, Site5, Linode, Fatcow, DreamHost, Rackspace, etc. WordPress Support forum For dedicated support and guidance on Migrate Guru, visit the WordPress.org support page. Here you can find community discussions, ask questions, and access resources to ensure smooth and efficient WordPress migrations.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C