Viable URL Media Uploader

Viable URL Media Uploader has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Viable URL Media Uploader has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Peerapat Samatathanyakorn. Viable URL Media Uploader is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Viable URL Media Uploader vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-14564

Viable URL Media Uploader <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Read the full analysis

Vulnerability Records

1 records
Viable URL Media Uploader banner
Latestv1.0.4

Viable URL Media Uploader

Ahsan Amin

Author

Ahsan Amin

5.0(5)
100/100
Last Updated
2026-10-18 (1d ago)
Active Installs
90+
Downloads
1,675
Requires WP
5.6.0+
Requires PHP
7.0+
Tested up to
WP 7.1.3
Created
2025-12-08 (11mo ago)

Viable URL Media Uploader allows you to quickly import media files directly from URLs into your WordPress media library without downloading them to your computer first. With just a URL, you can: Import images (JPG, PNG, GIF, WebP, SVG) from any publicly accessible source. Upload videos (MP4, WebM), PDFs, audio files, and more. Automatically generate thumbnails for images. Save the original URL as post meta for reference. Upload via a clean, dedicated upload page. Built by ViableCube, this plugin is perfect for content creators, developers, and site administrators who need a quick and efficient way to add media files from external sources like CDNs, cloud storage, or stock photo sites. Features Dedicated Upload Page – Standalone upload page accessible from the Media menu. Multiple File Type Support – Supports images (JPG, PNG, GIF, WebP, SVG), videos (MP4, WebM), PDFs, and audio files. SVG Support – Full support for SVG files with proper preview in the media library and built-in sanitization for security. Automatic Thumbnail Generation – Generates thumbnails automatically for uploaded images. Original URL Storage – Saves the original source URL as post meta for tracking and reference. Standard Form Submission – Reliable uploads with comprehensive error handling. Automatic File Type Detection – Intelligently detects file types from URLs and content. Error Handling – Comprehensive error handling with user-friendly messages. License This plugin is licensed under the GPLv2 or later. You can view the full license text here: https://www.gnu.org/licenses/gpl-2.0.html Support & Feedback We’d love to hear your feedback and suggestions! 📩 Email: ahsan@viablecube.com 🌐 Website: https://viablecube.com

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C