WP Manifestindependent plugin directory
manifest / updates / disciple-tools-migration

Disciple.Tools - Migrations WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

★ 0stars
8release downloads
≈10active sites
0.2latest · 22d ago

Install

Download disciple-tools-migration.zip From the 0.2 release on GitHub, Sep 30, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/discipletools/disciple-tools-migration/releases/download/0.2/disciple-tools-migration.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Move your Disciple.Tools settings and records from one site to another.

What it does

This plugin lets you export data from one Disciple.Tools site and import it into another. You can transfer:

  • General settings, custom lists, tiles, fields, roles, and workflows
  • System users (matched by email -- no passwords are transferred)
  • Contacts and groups, including comments and connections between records

How it works

Install and activate the plugin on both sites. You can migrate data in two ways:

  • File export/import -- Download your data as a file from the source site, then upload it on the destination site.
  • Direct connection -- Connect the two sites via API so the destination pulls data directly from the source.

Go to Extensions (D.T) → Migration in the WordPress admin to configure what to include, run a preflight check for potential issues, and start the migration.

Important: Importing records will replace existing records of the same type on the destination site.

Documentation

Step-by-step guides (file vs API), preflight, troubleshooting, and REST reference: see documentation/README.md.

Requirements

  • Disciple.Tools theme v1.20+
  • WordPress 4.7+
  • D.T admin role on both sites

License

GPL-2.0+

Releases

2 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
0.2 latest
Sep 30, 2026 22d ago
disciple-tools-migration.zip
3
0.1
May 6, 2026 5mo ago
disciple-tools-migration.zip
5

Active-site estimate ≈10 comes from the median of recent superseded releases. Method.

A- grade

Security

Disciple.Tools - Migrations 0.2 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
0.2
Findings
1
Worst severity
low
Content hash
04f8ad226e67a3a5f4d0c59c…

Findings

  • low Notice-dismiss AJAX writes arbitrary 'dismissed-*' options without capability check

    missing_capability

    wp_ajax_dismissed_notice_handler verifies a 'wp_rest_dismiss' nonce but performs no capability check, then update_option('dismissed-'.$type, true) with a caller-chosen suffix. Any logged-in user holding the nonce can create options prefixed 'dismissed-' (value fixed to true). Impact limited to notice suppression/option bloat.

    disciple-tools-migration.php:48, 274-285

    Recommendation

    Add current_user_can('manage_dt') and restrict $type to an allowlist of known notice keys.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.