plugin
4 known security issues reported for the Import External Attachments WordPress plugin. Most recent disclosed Dec 16, 2025.
Running Import External Attachments on your site? Check whether your installed version is affected.
Scan your site free[en] Missing Authorization vulnerability in ryanpcmcquen Import external attachments import-external-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Import external attachments: from n/a through <= 1.5.12.
The Import external attachments plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.5.12. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.
The Import external attachments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.12. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick...
[en] Cross-Site Request Forgery (CSRF) vulnerability in ryanpcmcquen Import external attachments allows Cross Site Request Forgery. This issue affects Import external attachments: from n/a through 1.5.12.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free