URL Image Importer

url-image-importer · plugin

Known security vulnerabilities for URL Image Importer. Find out in seconds which version runs on your site with WP Lens.

2 known vulnerabilities

latest Jan 6, 2026

Vulnerabilities

CVE-2025-12138
URL Image Importer <= 1.0.6 - Authenticated (Author+) Arbitrary File Upload
High 8.8
CVE-2025-14120
URL Image Importer <= 1.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium 6.4