WING Website Migrator
WING Website Migrator has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for WING Website Migrator has a vendor fix available, so running the current release closes it.
All of these findings were reported by Nguyen Tran Tuan Dung (domiee13). WING Website Migrator is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-52835WING WordPress Migrator <= 1.2.0 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
WING Website Migrator
Author
ConoHa by GMO
This plugin enables the “Easy Migration” feature for WordPress on ConoHa WING. It allows you to migrate a WordPress site running on another server to your ConoHa WING server. Target Users This plugin is available free of charge for ConoHa WING subscribers. To use the plugin, you need to enter the source WordPress site information from the ConoHa WING control panel. Please note that this plugin will not function on servers other than ConoHa WING. Support For usage instructions, please refer to the ConoHa WING user guide. ConoHa WING Customer Support: https://support.conoha.jp/wing/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C