Go to https://github.com/loureirorg/wordpress-plugin-export-users;
Clone the repository to your wp-content/plugins;
Inside the cloned folder, run composer install --no-dev and npm install --production;
Do not run composer install without the --no-dev option on a production server as it will install development libraries like phpunit, leading your server to be vulnerable to remote code execution attacks (RCE).;

Frequently Asked Questions

What about “Formula Injection” vulnerability?

This plugin is protected against this vulnerability since version 0.5.0.

Review feed

Jeff Starr

6/14/2020

Excellent Plugin

Does exactly what it says on the tin. Simple, easy, and effective. Thank you to the plugin author.

Daniel Chase

11/9/2021

Excellent Plugin

This plugin offers user meta. The other plugins I tried only offer that in a premium paid version. Thank you. Works great!

Screenshots

Exporting users.

Changelog

0.6.10

[Chore] Remove testing library from production code

0.6.9

[Bug] Fix formula injection vulnerability

0.6.8

[Patch] Tested up to WP 5.5.1.

0.6.7

[Bug] Headers already sent Warning on some installations.

0.6.6

[Patch] Add a “donate link” and a “PHP minimum” to readme.txt.

0.6.5

[Bug] Fix security issues.
[Patch] Add tests for CSV library.

0.6.4

[Bug] CSV with no data (but with the headers) when DB prefix is not “wp_”.

0.6.3

[Patch] Cleanup: remove unnecessary files from SVN.

0.6.2

[Patch] No changes on the code – Automatic deploy from GitHub.

0.6.1

[Patch] Remove dev vendor files (e.g. phpunit).

0.6.0

[Minor] Memory usage improvements. It consumes all memory and throws a memory exception on more than 10k users on a 256mb standard installation. This improvement makes it never use more than 10mb of memory.

0.5.1

[Bug] Exception due to type hinting on scalar types (PHP5.6<, PHP7 with PHP5 compability enabled). Fixed by updating “settings-as-woocommerce” library.

0.5.0

[Bug] Fix CSV Injection (aka Formula Injection).
[Bug] Not saving custom delimiter/qualifier chars.
[Minor] Use custom SQL to get all columns (performance).

0.4.1

[Bug] Page title is not showing on some WP versions since last update.

0.4.0

[Minor] Plugin code refactored.

0.3.1

[Bug] Not saving checkbox (bug introduced on version 0.2).

0.3.0

[Minor] Better UTF-8 support: Adds a BOM character at the beginning of the file.

0.2.4

Code completely refactored. Users shouldn’t notice any change.

0.2.3

Testing.

0.2.2

Testing.

0.2.1

Testing.

0.2.0

Code completely refactored. Users shouldn’t notice any change.

0.1.9

Bug: Missing js/css files.

0.1.8

New Feature: It is now possible to specify a field separator (; or , for instance), and a text qualifier (” or nothing, for instance).
Tested on WordPress 5.3 version

0.1.7

Fix performance issue. The “get_all_user_field_names()” method is running on ALL admin pages. This bug restricts this method to the export page only. See https://wordpress.org/support/topic/slow-query-get-all-users-on-each-page/

0.1.6

PHP 5.6 Compatibillity: Removing PHP7 operators ?? and ?:.

0.1.5

Security: Only users with the “list_users” permission can generate CSV. Before, any user with “manage_options” could (i.e. any admin user with permission to change settings).

0.1.4

Version bump.

0.1.3

Version bump.

0.1.2

Code Refactoring: Replaces the “router” implementation (an implementation that intercepts ALL http requests) with a “admin_post_{$action}” one. It reduces the code size and the code also becomes more WP-like and clear.
Code Refactoring II: Avoids potential conflict with other plugins by changing the action name from a generic “export-users” to “uewm_export_users”.

0.1.1

Adding an icon for this plugin.

0.1.0

First Version.

Back to plugins