Sitemovr

Sitemovr has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).

The one issue recorded for Sitemovr has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Ananda Dhakal. The current release is tested up to WordPress 7.0.7.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Sitemovr vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-41563

Sitemovr <= 1.0.1 - Unauthenticated Information Exposure

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv1.0.1
0.0(0)
0/100
Last Updated
2026-06-30 (4mo ago)
Active Installs
0+
Downloads
268
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 7.0.7
Created
2026-06-30 (4mo ago)

Sitemovr packages your entire WordPress site (files and database) into downloadable parts and reinstalls it on another server through a standalone installer, with no need to have WordPress pre-installed on the destination. It is designed to be safe and stable even on shared hosting: all the heavy work (database dump, file compression, import) is done in batches, avoiding the execution time and memory errors that break other migrations. Features Batched export of files and database (no memory or time exhaustion). Configurable part size (50 / 100 / 200 MB / 1 GB or custom) to match the destination upload limit. Configurable rows per batch for the database (500 / 1000 / 2000 or custom). SHA-256 checksums per part: integrity guaranteed after transfer. Package history: download the parts now or come back another day to continue. Standalone installer (single file) uploaded by FTP to the destination. Safe serialized search and replace: updates URLs and paths without corrupting widgets, theme or plugin settings. Configurable destination URL: migrate to another domain, not just another folder. Destination server compatibility check (PHP, MySQL, extensions, disk space, permissions). Deletion warning if the destination database already contains data. Auto-cleanup: the installer and package files are removed when finished. How it works On the SOURCE site, install Sitemovr and generate the package. Download its parts and the installer.php file. Upload to the DESTINATION server (without WordPress) by FTP: installer.php, the parts and parts.json. Open installer.php in the browser: it checks compatibility, asks for the new database, and migrates.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C