Demo Importer Plus

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 87% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

The only review here is a short five-star note calling it a great plugin, so there's not much to go on.

1. ★★★★★ Muhittin

   4.9y ago

   Great Plugin (Demo İmporter Plus)

   Read on wp.org ↗

5 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.5 Demo Importer Plus <= 2.0.9 - Authenticated (Author+) Blind XML External Entity Injection via SVG File Upload ↗
   2026-01-16 CVE-2025-14478 Improper Restriction of XML External Entity Reference Affects <= 2.0.9 Patched in 2.0.10
2. Medium · 4.3 Demo Importer Plus <= 2.0.8 - Missing Authorization ↗
   2026-01-05 CVE-2025-69091 Missing Authorization Affects <= 2.0.8 Patched in 2.0.9
3. High · 8.8 Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation ↗
   2025-12-17 CVE-2025-14364 Missing Authorization Affects <= 2.0.8 Patched in 2.0.9
4. High · 8.8 Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass ↗
   2025-12-04 CVE-2025-13066 Unrestricted Upload of File with Dangerous Type Affects <= 2.0.6 Patched in 2.0.7
5. Medium · 6.4 Demo Importer Plus <= 2.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload ↗
   2024-10-01 CVE-2024-9172 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.1 Patched in 2.0.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 3 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-06-24 20K+ → 10K+ down after 160 days in tier
2. 2025-01-15 10K+ → 20K+ up after 7 days in tier
3. 2025-01-08 20K+ → 10K+ down after 7 days in tier
4. 2025-01-01 10K+ → 20K+ up after 804 days in tier
5. 2022-10-20 9K+ → 10K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Starter Templates – AI-Powered Templates for Elementor & Gutenberg 1M+ installs · 4.9★ · 2 shared tags A
• Template Kit – Import 400K+ installs · 3.6★ · 2 shared tags D
• Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress 300K+ installs · 3.8★ · 2 shared tags B
• Hello Plus 80K+ installs · 3.8★ · 2 shared tags B
• aThemes Starter Sites 40K+ installs · 3.6★ · 2 shared tags B
• SKT Templates – 100% Free Templates for Elementor & Gutenberg 20K+ installs · 4.3★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Demo Importer Plus into a readme, a review or a deck. It updates itself.

Demo Importer Plus: 10K+ active installs, 5.0★ (1 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/demo-importer-plus