Export and Import Users and Customers

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

273 searches this plugin appeared in over the last 90 days, 20 listed. 187 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 58% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 8 days ago and the previous band took 23 months to cross, so the real count is still just under 60K.

1. ★★★★★ brandonvd

   4mo ago

   This plugin worked perfectly for importing users into my site/store.

   Read on wp.org ↗
2. ★★★★★ Misophoniq

   4mo ago

   This plugin abuses the admin notification system for big banner ads for other plugins made by this developer. Avoid!

   Read on wp.org ↗
3. ★★★★★ softwarereview

   6mo ago

   This plugin was incredibly helpful; it perfectly fulfilled all my requirements. Specifically, it facilitated the seamless migration of my entire website to a staging environment. Furthermore, it enabled the effortless synchronization of WooCommerce data, including customers, product catalogs, and order histories, between the staging area and the live production site. This process was executed flawlessly, ensuring a smooth transition and data consistency prior to the official website launch.

   Read on wp.org ↗
4. ★★★★★ Kristians Krauklis

   8mo ago

   Thanks! Was so easy to migrate users from old site to new !

   Read on wp.org ↗
5. ★★★★★ Li-An

   8mo ago

   For a free newsletter plugin, I needed to export basic information from my users (name, email) and the plugin did a good job. Easy to use and understand.

   Read on wp.org ↗
6. ★★★★★ Omar AlDabbas

   9mo ago

   Tried it on a huge database ~25k users, worked flawlessly

   Read on wp.org ↗
7. ★★★★★ kavlito

   11mo ago

   WebToffee makes great plugins! Thank you for making my conversion from Abantecart easy!

   Read on wp.org ↗
8. ★★★★★ PUShAUNE

   12mo ago

   It does not work with basic CSV file using semicolon as separator.Useless plugin.

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-10-26 Version 2.7.7 [Improvement] – Security: hardened CSV URL import to block requests to private/internal network addresses. See changelog for all versions 2.7.7
2. 2026-10-12 Version 2.7.6 [Compatibility] – Tested OK with WordPress 7.1.3 [Compatibility] – Tested OK with WooCommerce 11.2.1 [Fix] – Security: hardened CSV export to prevent row injection on re-import that could lead to privilege escalation via 2.7.6
3. 2026-08-18 Version 2.7.5 [Compatibility] – Tested OK with WordPress 7.1 [Compatibility] – Tested OK with WooCommerce 11.0.1 [Update] – Translation updates [Fix] – Fixed export fatal on PHP 8+ when “wc_last_active” or “last_update” meta was a dat 2.7.5
4. 2026-05-26 Version 2.7.4 [Compatibility] – Tested OK with WordPress 7.0 See changelog for all versions 2.7.4

All 11 disclosed vulnerabilities are patched in the current version (2.7.7). Sites still on an older version should update.

1. Patched High · 8.8 Export and Import Users and Customers <= 2.7.5 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via Biographical Info Field ↗
   2026-10-29 CVE-2026-104368 Improper Encoding or Escaping of Output Affects <= 2.7.5 Patched in 2.7.6
2. Patched Medium · 4.9 Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function ↗
   2025-03-21 CVE-2025-1973 Improper Limitation of a Pathname to a Restricted Directory Affects <= 2.6.2 Patched in 2.6.3
3. Patched Low · 2.7 Export and Import Users and Customers <= 2.6.2 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function ↗
   2025-03-21 CVE-2025-1972 External Control of File Name or Path Affects <= 2.6.2 Patched in 2.6.3
4. Patched High · 7.2 Export and Import Users and Customers <= 2.6.2 - Authenticated (Admin+) PHP Object Injection via form_data Parameter ↗
   2025-03-21 CVE-2025-1971 Deserialization of Untrusted Data Affects <= 2.6.2 Patched in 2.6.3
5. Patched High · 7.6 Export and Import Users and Customers <= 2.6.2 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function ↗
   2025-03-21 CVE-2025-1970 Server-Side Request Forgery Affects <= 2.6.2 Patched in 2.6.3
6. Patched High · 7.2 Export and Import Users and Customers <= 2.5.3 - Authenticated (Admin+) PHP Object Injection ↗
   2024-04-22 CVE-2024-32835 Deserialization of Untrusted Data Affects <= 2.5.3 Patched in 2.5.4
7. Patched Low · 2.7 Import Export WordPress Users <= 2.5.2 - Authenticated (Shop Manager+) Path Traversal ↗
   2024-03-28 CVE-2024-30492 Improper Limitation of a Pathname to a Restricted Directory Affects <= 2.5.2 Patched in 2.5.3
8. Patched High · 7.2 Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload ↗
   2023-12-12 CVE-2023-6558 Unrestricted Upload of File with Dangerous Type Affects <= 2.4.8 Patched in 2.4.9
9. Patched High · 7.2 Export and Import Users and Customers <= 2.4.1 - Missing Authorization to Authenticated (Shop Manager) Arbitrary User Password Change ↗
   2023-07-14 CVE-2023-3459 Incorrect Authorization Affects <= 2.4.1 Patched in 2.4.2
10. Patched High · 8.8 WebToffee Plugins <= (Various Versions) - Arbitrary User Creation ↗
    2020-03-11 CVE-2020-12074 Missing Authorization Affects < 1.3.9 Patched in 1.3.9
11. Patched High · 7.3 Import Export WordPress Users and WooCommerce Customers <= 1.3.1 - CSV Injection ↗
    2018-08-22 CVE-2019-15092 Improper Neutralization of Special Elements in Output Used by a Downstream Component Affects < 1.3.2 Patched in 1.3.2

Translated into 8 languages, 0 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

This plugin’s searches fall outside the topics measured so far. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-10-26 60K+ → 50K+ down after 696 days in tier
2. 2024-11-29 70K+ → 60K+ down after 792 days in tier
3. 2022-09-29 60K+ → 70K+ up after 305 days in tier
4. 2021-11-28 50K+ → 60K+ up after 262 days in tier
5. 2021-03-11 40K+ → 50K+ up after 248 days in tier
6. 2020-07-06 30K+ → 40K+ up after 205 days in tier
7. 2019-12-14 20K+ → 30K+ up after 100 days in tier
8. 2019-09-05 10K+ → 20K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Export and Import Users and Customers into a readme, a review or a deck. It updates itself.

Export and Import Users and Customers: 50K+ active installs, 4.8★ (442 reviews). Plugin Pulse (WP Mayor), as of 2026-11-03. https://plugins.wpmayor.com/plugin/users-customers-import-export-for-wp-woocommerce