Change log
- Feature: Added support for exporting inactive installed plugins.
- Feature: Added support for exporting inactive installed themes.
- Compatibility: Exclude plugins that include super-large backup storage files.
- Compatibility: Exclude super-large backup folders from migrations created by third-party sources.
- Compatibility: Exclude known super-large file extensions of popular backup plugins.
- Security: Hardened code execution safety against a potential Zip Slip vulnerability. (Credit: Sarvar Eshboyev)
- Security: Resolved an unauthorized directory deletion issue involving the WPRIME folder. (Credit: Sarvar Eshboyev)
- Security: Resolved XSS issues on the package manager page. (Credit: Sarvar Eshboyev)
- Fixed: Added containment rules for directory and file deletions.
New feature: Export inactive plugins/themes
You can now export inactive plugins/themes with Prime Mover 2.2.1+. This is one of the user-requested features from WordPress.org.
For details on how to use this feature, see this official tutorial.
Compatibility: Exclude plugins with super large directories
Some migration plugins include a storage directory, but when their export fails, it leaves large chunk files in that directory. We exclude these plugins automatically for user export convenience. This prevents issues with insufficient disk space or unreasonably large packages.
Compatibility: Exclude super-large backup folders
For convenience and compatibility, we intentionally exclude file types created by other backup plugins in the uploads directory. The reason is efficiency and performance. These files are usually very large and include a copy of the site. If a user wants to use Prime Mover to migrate and back up, it’s best to auto-exclude these files so they don’t cause incompatibility issues during export and restore (e.g., running out of disk space).
Security fixes
We found some issues during the security audit, and we fixed them all in the latest release, Prime Mover 2.2.1. Special thanks to Sarvar Eshboyev for catching all these issues.
We also hardened the plugin’s default deletion procedures to ensure all deleted files and directories are contained and meet specific requirements.
Get in touch with us!
Since this includes a security update, we recommend updating your Prime Mover to the latest version as soon as possible. Make sure you are using at least Prime Mover 2.2.1 installed on your site. All these fixes apply to both FREE and PRO versions.
If you have further questions, please drop them here. Thank you!