Upcasted S3 Offload
Limited data: Upcasted S3 Offload has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 50 |
| Security | 30 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is Upcasted S3 Offload still maintained?
- Yes. Last release 15 Dec 2025, 5 releases in the last 24 months. 15 Dec 2025 · wordpress.org
- Who owns Upcasted S3 Offload, and has it changed hands?
- No change recorded. Main committer upcasted since Jun 2020. 4 Nov 2026 · SVN log
- Was Upcasted S3 Offload removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Upcasted S3 Offload safe?
- No. 1 known vulnerability has no fix in the current version. 9 Oct 2026 · Wordfence Intelligence
- Is the latest Upcasted S3 Offload update safe to install?
- No ownership change before 3.1.0. No one-star spike after it. 15 Dec 2025 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 9 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Oct 2026Evidence
- WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 25 Jun 2020 to 25 Jun 2020, 1 commits |
|---|---|
| upcasted | 27 Jun 2020 to 15 Dec 2025, 45 commits |
2 committers recorded. No ownership change since 2020.
Maintenance
- Last release
- 11 months ago
- Releases, 24 months
- 5
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 1 |
| Q2 2025 | 1 |
| Q3 2025 | 2 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 15 Dec 2025. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 3.4.
| 5 star | 6 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 4 |
Security record
2 vulnerabilities in 24 months (3 on record), 1 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 9 Oct 2026 | Upcasted S3 Offload - AWS S3, DigitalOcean Spaces, Backblaze, MinIO Storage Integration <= 3.1.0 - Missing Authorization | 4.3 | <= 3.1.0 | No fix | n/a |
Show 2 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 3 Feb 2025 | Upcasted S3 Offload - AWS S3, Digital Ocean Spaces, Backblaze, Minio and more <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting | 6.4 | <= 3.0.3 | 3.0.4 | n/a |
| 18 Jul 2023 | Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get | 6.1 | 2.0.0 to 3.0.2 | Not affected | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
200+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 3.1.0 |
|---|---|
| Author | upcasted |
| Added | 27 Jun 2020 |
| Last updated | 15 Dec 2025 |
| Active installs | 200+ |
| Requires WordPress | 4.9 |
| Tested up to | 6.9.11 |
| Requires PHP | 7.4 |
| Category | not stated |
| Tags | s3, aws s3, media library, object storage, digitalocean spaces |
Other plugins by this author: AI Image Generator - Easy image creation with AI
Questions
Is Upcasted S3 Offload still maintained?
Yes. Last release 15 Dec 2025, 5 releases in the last 24 months.
Who owns Upcasted S3 Offload, and has it changed hands?
No change recorded. Main committer upcasted since Jun 2020.
Was Upcasted S3 Offload removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Upcasted S3 Offload safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest Upcasted S3 Offload update safe to install?
No ownership change before 3.1.0. No one-star spike after it.