Skip to content
PluginCanary

Image Uploader for Welcart

Fewer than 10 active installs · Checked 3 Nov 2026
Avoid2 Criticals

Avoid: Image Uploader for Welcart is closed on wordpress.org and no longer gets updates.

10/ 100 Canary Score

Capped at 10: the plugin is closed on wordpress.org.

Sub-scores for Image Uploader for Welcart
Ownership100
Maintenance10
Security35
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Image Uploader for Welcart still maintained?
No. Closed on wordpress.org on 12 Aug 2026. 12 Aug 2026 · wordpress.org
Who owns Image Uploader for Welcart, and has it changed hands?
Not enough data. Commit history is collected for plugins with 1,000+ installs or on a watchlist. 3 Nov 2026 · SVN log
Was Image Uploader for Welcart removed from wordpress.org?
Yes. Closed on 12 Aug 2026, reason: security issue. 12 Aug 2026 · wordpress.org
Is Image Uploader for Welcart safe?
No. 1 known vulnerability has no fix in the current version. 14 Aug 2026 · Wordfence Intelligence
Is the latest Image Uploader for Welcart update safe to install?
Not enough data. No release date on record for the current version. Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 14 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.28 Aug 2026Evidence
  • CriticalCLS-1Closed on wordpress.org on 12 Aug 2026, reason: security issue. Replace this plugin. It no longer receives updates from wordpress.org.12 Aug 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

No ownership change recorded. Commit history is collected for plugins with 1,000+ installs or on a watchlist.

Maintenance

Last release
not recorded
Releases, 24 months
0
Tested up to
not stated vs 7.1
Requires PHP
not stated supported 8.2+

Release history builds as we see new versions.

Reputation

Last 90 days: no reviews.

Security record

1 vulnerability in 24 months, 1 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
14 Aug 2026Image Uploader for Welcart <= 1.4.6 - Authenticated (Author+) SQL Injection via Attachment 'post_title' Parameter6.5<= 1.4.6No fixn/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

Fewer than 10 active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Versionnot stated
Authornot stated
Addednot stated
Last updatednot stated
Active installsFewer than 10
Requires WordPressnot stated
Tested up tonot stated
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsnot stated

Questions

Is Image Uploader for Welcart still maintained?

No. Closed on wordpress.org on 12 Aug 2026.

Who owns Image Uploader for Welcart, and has it changed hands?

Not enough data. Commit history is collected for plugins with 1,000+ installs or on a watchlist.

Was Image Uploader for Welcart removed from wordpress.org?

Yes. Closed on 12 Aug 2026, reason: security issue.

Is Image Uploader for Welcart safe?

No. 1 known vulnerability has no fix in the current version.

Is the latest Image Uploader for Welcart update safe to install?

Not enough data. No release date on record for the current version.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue