AutoFetch Content Migration lets you connect a destination WordPress site to a remote source WordPress site’s REST API to query, filter, and import any public post type (posts, pages, custom post types), media assets, categories, and tags — all handled incrementally over AJAX to avoid timeouts.
Unlike traditional migration tools that require database dumps or XML exports, AutoFetch handles the process post-by-post without touching the source site’s database directly.
Authentication
AutoFetch uses WordPress Application Passwords for secure, authenticated access to the source site. This allows importing published, draft, pending, and private posts with full content and metadata.
Security Features
- SSRF Protection: Source URLs are validated against private and loopback address ranges.
- PHP Object Injection Mitigation: Deserialization of custom fields is handled with
allowed_classesset to false. - Server-Side Transients: Credentials are stored in server-side transients expiring in 1 hour.
- HTTPS Enforcement: Application Password connections require HTTPS.
- Per-Post Capability Checks: REST API meta exposure is gated by per-post edit capability.
Migration Features
- Dynamic Post Type Support: Automatically detects all public post types on the source site.
- Deep Media Sideloading: Downloads images, registers them in the Media Library, and rewrites URLs.
- Smart Taxonomy Sync: Automatically syncs and assigns categories and tags to imported posts.
- Auto-Resume Engine: Resumes bulk imports after a crash or page reload.
- SEO Meta Mapping: Preserves metadata for Yoast SEO and Rank Math.
- Migration Reports: Every imported post is tracked with its original source URL and import timestamp.