Skip to content
PluginCanary

Featured Image from URL (FIFU)

by fifu.app · 60,000+ active installs · Checked 3 Nov 2026
Healthy3 Warnings

Healthy: vulnerability published 3 Oct 2026, fixed in 6.0.8.

81/ 100 Canary Score
Sub-scores for Featured Image from URL (FIFU)
Ownership100
Maintenance100
Security50
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 3 Oct 2026, fixed in 6.0.8. Update to version 6.0.8 or later.3 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 29 Sep 2026, fixed in 6.0.8. Update to version 6.0.8 or later.29 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 12 Aug 2026, fixed in 6.0.0. Update to version 6.0.0 or later.12 Aug 2026Evidence
  • InfoSEC-39 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
marceljm3 Oct 2015 to 29 Oct 2026, 949 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
74
Tested up to
7.2 current
Requires PHP
8.1 supported 8.2+
Releases per quarter for Featured Image from URL (FIFU)
Q1 202412
Q2 202414
Q3 20249
Q4 20244
Q1 202510
Q2 202513
Q3 202510
Q4 20258
Q1 20262
Q2 20260
Q3 202620
Q4 202610

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

50% of 4 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
3 Oct 2026Featured Image from URL (FIFU) <= 6.0.7 - Cross-Site Request Forgery4.3<= 6.0.76.0.80
29 Sep 2026Featured Image from URL (FIFU) Free & Premium <= 6.0.7 - Cross-Site Request Forgery8.8<= 6.0.76.0.80
12 Aug 2026Featured Image from URL (FIFU) <= 5.3.3 - Authenticated (Contributor+) Stored Cross-site Scripting6.4<= 5.3.36.0.00
9 Jan 2026Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'4.3<= 5.3.15.3.20
6 Oct 2025Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields6.4<= 5.2.75.2.8389
25 Sep 2025Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure5.3<= 5.2.75.2.8399
25 Sep 2025Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File5.3<= 5.2.75.2.8400
25 Sep 2025Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection4.9<= 5.2.75.2.8400
25 Sep 2025Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection4.9<= 5.2.75.2.8400
5 Jul 2024Featured Image from URL <= 4.8.2 - Missing Authorization4.3<= 4.8.24.8.3259
28 Jun 2024Featured Image from URL <= 4.8.1 - Missing Authorization5.3<= 4.8.14.8.2263
19 Feb 2024Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url6.4<= 4.6.24.6.3135
14 Dec 2023Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text6.4<= 4.5.34.5.4144
5 Jul 2022Featured Image from URL (FIFU) <= 4.0.0 - Stored Cross-Site Scripting5.5<= 4.0.04.0.1143
30 Jun 2022Featured Image from URL (FIFU) <= 3.9.9 - Cross-Site Request Forgery8.8<= 3.9.94.0.0141
24 Dec 2019Featured Image from URL <= 2.7.7 - Missing Authorization on REST API routes7.3<= 2.7.72.7.8194

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Featured Image from URL (FIFU)
Q4 20245.0
Q2 20253.5
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20264.8
Q3 20265.0

Average rating stayed at 5.0 between Q4 2024 and Q3 2026.

Rating distribution
5 star228
4 star6
3 star6
2 star8
1 star16
Latest low reviews

Momentum

60,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Featured Image from URL (FIFU)
4 May 2026836
11 May 20261,441
18 May 20261,377
25 May 20261,513
1 Jun 20261,164
8 Jun 20261,150
15 Jun 20261,153
22 Jun 20261,203
29 Jun 20261,155
6 Jul 20261,021
13 Jul 2026969
20 Jul 20261,004
27 Jul 20261,061
3 Aug 202614,059
10 Aug 202665,823
17 Aug 202625,146
24 Aug 20265,045
31 Aug 202620,562
7 Sep 202627,874
14 Sep 20264,858
21 Sep 20263,391
28 Sep 202623,067
5 Oct 202631,240
12 Oct 20263,945
19 Oct 202630,919
26 Oct 202624,920
2 Nov 20261,052

Weekly downloads over the last 4 weeks are 38% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Folders - Unlimited Folders to Organize Media Library Folder, Pages, Posts, File ManagerScore 95 · 90,000+Big File Uploads - Increase Maximum File Upload SizeScore 93 · 100,000+Real Media Library: Media Library Folder & File ManagerScore 92 · 100,000+Media Library Organizer - Folders, File Manager & Media CategoriesScore 92 · 20,000+reGenerate Thumbnails AdvancedScore 91 · 60,000+

Facts

Version6.1.4
Authorfifu.app
Added3 Oct 2015
Last updated29 Oct 2026
Active installs60,000+
Requires WordPress5.6
Tested up to7.2
Requires PHP8.1
CategoryE-commerce & Shopping
Tagsimage url, remote image, product image, external image, featured image

Questions

Is Featured Image from URL (FIFU) still maintained?

Featured Image from URL (FIFU) was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is Featured Image from URL (FIFU) safe?

Featured Image from URL (FIFU) has no open unpatched vulnerabilities on record. 9 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Featured Image from URL (FIFU)?

The wordpress.org author is fifu.app. Recent committers: marceljm, plugin-master. We have recorded no ownership change.

What can I use instead of Featured Image from URL (FIFU)?

Plugins in the same category with a higher Canary Score: Folders - Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager, Big File Uploads - Increase Maximum File Upload Size, Real Media Library: Media Library Folder & File Manager, Media Library Organizer - Folders, File Manager & Media Categories, reGenerate Thumbnails Advanced.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue