DevThrow Migrator

DevThrow Migrator is a WordPress migration utility that helps you transfer selected website data between WordPress installations.

Export selected WordPress data into a ZIP migration package and import it into another WordPress installation. The importer processes data in batches to help manage larger migrations.

Supported Data

• Posts and pages.
• Custom post types.
• Taxonomies and terms.
• Users and user metadata.
• Comments and comment metadata.
• Attachment records and attachment metadata.
• Navigation menus.
• Selected WordPress options from a predefined allowlist.
• Custom and plugin database tables selected explicitly by the administrator.

Important Information

Physical files inside the wp-content/uploads directory are not included in the migration package. Copy the uploads directory separately when you need to transfer media files.

Migration operations are restricted to users with the manage_options capability. AJAX requests use WordPress nonces and capability checks.

Security

DevThrow Migrator includes safeguards designed to help protect sensitive information during migration.

• User passwords are never exported.
• Session tokens and capability-related user metadata are excluded from export and import.
• Imported option names are restricted to a predefined allowlist.
• ZIP extraction checks file paths to help prevent directory traversal.
• Only recognized migration files are extracted.
• Custom database tables must be selected explicitly and use the current WordPress table prefix.
• Download requests require capability checks and nonce verification.

Notes

User Accounts

When an imported user does not match an existing account, the importer creates a new user with a generated password. Those users should use the standard WordPress password-reset process to establish their passwords.

Media Files

Attachment records and attachment metadata can be migrated, but the actual files stored in wp-content/uploads must be copied separately.

Database Tables

Custom and plugin tables must be selected explicitly. Only tables using the current WordPress table prefix are eligible.

Site Options

Only options permitted by the plugin’s predefined allowlist can be imported.