WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import
by Smackcoders Inc., · Content & Feeds
Also makes 17 other plugins · 36.6K+ installs across the portfolio →
Import CSV, XML and Excel files into WordPress. Bulk import posts, pages, WooCommerce products, users, ACF fields, images, custom post types and more.
M WP Mayor reviewed this plugin WP Ultimate CSV Importer Pro Review Read review ↗87 health vs 60 average across 779 Content & Feeds plugins
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Excellent listing optimization
Biggest win: Support resolution
To rank higher: Mark more forum threads resolved — the resolved ratio feeds the ranking.
Get the full rank-higher report →Daily downloads
Since 2022-10-05 · 1,421 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peaks are release surges
25.9K
now · peak 43.5K
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Rating trend
Star average over time · dips mark rough releases
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Actively maintainedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
22
releases in the last 12 months
2mo ago
latest release · v8.1
234
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “20K+”. Our estimate pins where the real number sits.
Modeled within the band wp.org reports; tightens as we track daily.
Install history · since 2015-03-10 · 1,478 observations
Estimated value
What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.
Est. annual revenue
Est. acquisition value
No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.
Details
Recent reviews
All reviews on wp.org ↗- ★★★★★ kibitzer1mo ago
An excellent plugin, and the free version gives you all you need to get started. 5 stars from me!
Read on wp.org ↗ - ★★★★★ Jaroslava3mo ago
This plugin did exactly what I needed. I only used the free version, mainly for CPT and ACF, and it worked smoothly without any issues. Easy to set up, clear to use, and very helpful. Thank you!
Read on wp.org ↗ - ★★★★★ denis243mo ago
Easy to use and works well on custom post types.
Read on wp.org ↗ - ★★★★★ SocialSparkMedia3mo ago
I was able to import a csv with 215 rows and 9 columns, into a CPT. My import file included multiple taxonomies in one column, separated by commas. Everything worked perfectly. It created and assigned the taxonomy categories successfully. I couldn’t be happier with it. I have used another, premium plugin to import CSV files before and it was overly complicated and expensive. This did exactly what I needed for free. If you are using ACF Pro then you need the pro version of this. A previous version had a fatal error, but after I alerted the developers to the problem they fixed it and sent me a new zip file right away, so support is good. Thank you for a great free plugin!
Read on wp.org ↗ - ★★★★★ kris10uk4mo ago
Very impressed with how easy this was to use. I had my posts populated in minutes from a CSV. Highly recommend.
Read on wp.org ↗ - ★★★★★ Jim Walczak5mo ago
This plugin does exactly what you would expect it to do. Well thought out and an easy to understand UI out of the box. It’s my favorite new tool in my tool kit!
Read on wp.org ↗ - ★★★★★ chely005mo ago
Excellent Plugin, the support helped me in my case
Read on wp.org ↗ - ★★★★★ hetclub6mo ago
The flexibility that it has is very impressive , I have used it for a couple of proof of concept moves and the flexibility in it is amazing. This topic was modified 4 months, 1 week ago by hetclub. Reason: Spelling
Read on wp.org ↗
Latest updates
via wp.org changelogRecent releases and news for this plugin
- — Version 8.1 Security: Hardened AJAX authorization, nonce handling and import workflows; remediated CVE-2026-13353 related vulnerabilities. Improved: Content Update UI with disabled controls and Pro labels for restricted importer typ 8.1
- — Version 8.0.1 Improved: Compatibility with the latest JetEngine and MetaBox plugin versions. 8.0.1
- — Version 8.0 Added: Improved import workflow and duplicate handling. Added: Enhanced developer API with centralized lifecycle hook support. Improved: CPT slug handling and override field support during post imports. Improved: Localiz 8.0
- — Version 7.41 Fixed: Category import mapping issue causing posts to fall back to “Uncategorized” during taxonomy imports Improved: Restructured plugin bootstrap architecture with a dedicated core namespace for better maintainability I 7.41
- — Version 7.40 Fixed: Record count retrieval for WooCommerce customers in export Fixed: Image resolution from import hash folder and smack_uci_uploads/import_images directory Added: WordPress 7.0 compatibility updates across core plugi 7.40
- — Version 7.39.2 Added: Compatibility for WordPress 6.9.3 Fixed: Minor bugs in simple mode import 7.39.2
Known vulnerabilities
via Wordfence Intelligence27 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.
- 2026-07-10 CVE-2026-13353 Improper Control of Generation of Code ('Code Injection') Affects <= 8.0.1 Patched in 8.1
- 2026-02-17 CVE-2026-1317 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 7.37 Patched in 7.38
- 2025-11-11 CVE-2025-12732 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 7.33 Patched in 7.33.1
- 2025-09-16 CVE-2025-10057 Improper Control of Generation of Code ('Code Injection') Affects 7.20 - 7.28 Patched in 7.29
- 2025-03-31 CVE-2025-2008 Unrestricted Upload of File with Dangerous Type Affects <= 7.19 Patched in 7.19.1
- High · 7.5 WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing ↗2023-08-03 CVE-2023-4139 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 7.9.8 Patched in 7.9.9
- 2023-08-03 CVE-2023-4141 Improper Control of Generation of Code ('Code Injection') Affects <= 7.9.8 Patched in 7.9.9
- 2023-08-03 CVE-2023-4142 Improper Control of Generation of Code ('Code Injection') Affects <= 7.9.8 Patched in 7.9.9
- 2022-09-20 CVE-2022-3243 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 6.5.7 Patched in 6.5.8
- 2022-01-26 CVE-2022-0360 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 6.4.3 Patched in 6.4.3
- 2022-01-17 Missing Authorization Affects <= 6.4.1 Patched in 6.4.2
- Medium · 6.3 Easy Drag And drop All Import : WP Ultimate CSV Importer < 6.4.1 - Missing Authorization Checks ↗2022-01-12 Missing Authorization Affects < 6.4.1 Patched in 6.4.1
- 2022-01-12 Unrestricted Upload of File with Dangerous Type Affects <= 6.4.0 Patched in 6.4.1
- Medium · 6.1 Import Export All WordPress Images, Users & Post Types <= 3.8.7 - Reflected Cross-Site Scripting ↗2018-01-27 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.8.8 Patched in 3.8.8
- Medium · 6.1 Easy Drag And drop All Import : WP Ultimate CSV Importer < 3.8.1 - Cross-Site Scripting ↗2015-08-18 CVE-2015-9306 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.8.1 Patched in 3.8.1
- 2015-04-27 Improper Authentication Affects <= 3.7 Patched in 3.7.1
- 2015-02-22 Exposure of Sensitive Information to an Unauthorized Actor Affects < 3.6.75 Patched in 3.6.75
Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.
CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.
Behavioral tests
via WP HiveAutomated install-time checks, tested on PHP 8.1.12 · WP 7.0
Languages
via translate.wordpress.orgTranslated into 12 languages, 1 at 90% or more
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
No tier crossings observed yet.
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
WP Smart Import : Import any XML File to WordPress 900+ installs · 3.9★ · 2 shared tags B -
Panama Product Import for WooCommerce (XML, CSV, YML) — installs · 4.1★ · 2 shared tags A -
Product Import Export for WooCommerce – Import Export Product CSV Suite 80K+ installs · 4.6★ · 1 shared tag A -
WP All Import – Product Import for WooCommerce 20K+ installs · 4.6★ · 1 shared tag A -
Import WooCommerce Suite for Products, Orders, Coupons, Reviews, and Customers | WP Ultimate CSV Importer 4K+ installs · 3.4★ · 1 shared tag B -
Product Sync for WooCommerce – API Import, Dropshipping & Inventory Sync 300+ installs · 4.5★ · 1 shared tag A
Embed this report card
Drop a live Pulse card for WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/wp-ultimate-csv-importer" width="480" height="300" style="border:0" loading="lazy" title="WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import — Plugin Pulse"></iframe> WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import: 20K+ active installs, 4.4★ (587 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/wp-ultimate-csv-importer