XServer Migrator

XServer Migrator has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 2 are fixed as of October 2026. Their average CVSS score is 7.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 2 issues recorded for XServer Migrator has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. XServer Migrator is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSHigh

7.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all XServer Migrator vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2024-33913

Xserver Migrator <= 1.6.2 - Cross-Site Request Forgery to Arbitrary File Upload

Read the full analysis

Vulnerability Records

2 records


2026-10-05 11:22	XServer Migrator <= 1.6.6 - Unauthenticated Information Exposure XServer Migrator <= 1.6.6	`CVE-2026-102387`	5.3 Medium	Ismayil Tahmazov	Yes
2024-04-29 00:00	Xserver Migrator <= 1.6.2 - Cross-Site Request Forgery to Arbitrary File Upload XServer Migrator <= 1.6.2	`CVE-2024-33913`	8.8 High	Dimas Maulana	Yes

Showing 1–2 of 2 reports

Latestv1.6.7

XServer Migrator

Author

XServer

0.0(0)

0/100

Last Updated

2026-09-30 (28d ago)

Active Installs

10,000+

Downloads

222,742

Requires WP

4.2.29+

Requires PHP

Tested up to

WP 7.1.3

Created

2018-11-30 (8y ago)

エックスサーバー株式会社が提供するレンタルサーバーサービスの「エックスサーバー」「wpX Speed」で「WordPress簡単移行機能」をご利用いただくためのプラグインです。本プラグインを利用すると、他社サーバーでお使いのWordPressを弊社のサーバーへ移行することができます。利用対象「エックスサーバー」「wpX Speed」をご契約のお客様のみ、無料でご利用いただけます。ご利用いただく際は、各レンタルサーバーサービスの「WordPress簡単移行機能」から、WordPressのURLとログイン情報を入力してください。サポートプラグインの使用方法は、マニュアルをご参照ください。　▼エックスサーバーマニュアル　　https://www.xserver.ne.jp/manual/man_install_transfer_wp.php 　▼wpX Speed マニュアル　　https://www.wpx.ne.jp/support/manual/man_transfer_easy.php

View on WordPress.org