Import external attachments

Quick answers

Is Import external attachments still maintained?

No. Last release 24 Feb 2017, over 9 years ago. 24 Feb 2017 · wordpress.org

Who owns Import external attachments, and has it changed hands?

No change recorded. 3 Nov 2026 · SVN log

Was Import external attachments removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org

Is Import external attachments safe?

No. 2 known vulnerabilities have no fix in the current version. 14 Dec 2025 · Wordfence Intelligence

Is the latest Import external attachments update safe to install?

No ownership change before 1.5.12. No one-star spike after it. 24 Feb 2017 · Release history

Active signals

Facts we detected, with links to the source.

• CriticalSEC-2Vulnerability published 14 Dec 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.28 Dec 2025Evidence
• CriticalSEC-2Vulnerability published 27 Jun 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.11 Jul 2025Evidence
• CriticalMNT-1No release in 117 months (last release 24 Feb 2017). Plan a replacement if the plugin is important to your site.24 Feb 2018Evidence
• WarningMNT-2Tested up to WordPress 4.4.34, 27 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

No ownership change since 2016.

Security record

2 vulnerabilities in 24 months, 2 with no fix in the current version.

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

FoldersScore 95 · 90,000+Big File UploadsScore 93 · 100,000+Real Media LibraryScore 92 · 100,000+Media CleanerScore 92 · 90,000+Media Library OrganizerScore 92 · 20,000+

Facts

Questions