Go Live Update Urls
Go Live Update Urls has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (100%).
The one issue recorded for Go Live Update Urls has a vendor fix available, so running the current release closes it.
All of these findings were reported by Ananda Dhakal. Go Live Update Urls is installed on roughly 90,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-94678Go Live Update Urls <= 7.0.8 - Authenticated (Contributor+) PHP Object Injection
Read the full analysisVulnerability Records

Go Live Update Urls
Author
Mat Lipe
Change the domain on your site with one click. Goes through entire site and replaces all instances of an old URL with a new one. Used most often when changing the domain of your site. Automatically detects and handles special domain circumstances to give you an accurate update every time without side effects. Developed and supported by OnPoint Plugins. Features Database table by table selection. Updates serialized data in core tables. Updates encoded URL. Easy to use admin page – which may be found under Tools. Works on both multisite and single site installs. Updates Entire Site Including Posts Pages Image URLs Excerpts Post meta data Custom post types Widgets and widget data Options and settings And much more Domain Update Process Full step-by-step instructions for a changing a site’s domain may be found here. Included Language Translations English (en_US). French (fr_FR). German (de_DE). Spanish (es_ES). Developers Developer docs may be found here. Troubleshooting Troubleshooting information may be found here. Contribute Send pull requests via the Github Repo Go PRO Our PRO version brings additional functionality to this plugin. Check out the demo to see if the PRO version is useful for you. Updates database tables created by plugins. Database tables are organized into simple intuitive sections. Ability to choose between tables or sections. Ability to convert relative URL into absolute URL. Updates serialized data across any table. Updates encoded URL across any table. Updates JSON data across any table. Ability to test URL changes before running them. URL testing report is provided for peace of mind. Option to fix common mistakes automatically when entering a URL. View and use history of your site’s address. Accessible update history including count and location of updated URL. New Predictive URL automatically fill in the “Old URL” and “New URL.” Real time reporting of count and location of URL which will be updated. Report of count and location of URL which were updated. WP-CLI support for updating URL from the command line. Priority support with access to members only support area.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C