AJAX File Upload Security & Risk Analysis
wordpress.org/plugins/ajax-file-uploadFast and easy front-end WordPress file uploader with shortcodes fully extensible
Is AJAX File Upload Safe to Use in 2026?
Generally Safe
Score 85/100AJAX File Upload has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The "ajax-file-upload" v0.1.1.1 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of any recorded vulnerabilities, including known CVEs, is a significant positive indicator. Furthermore, the code demonstrates good practices such as 100% of SQL queries using prepared statements and the presence of nonce checks on its entry points. However, a notable concern is the relatively low percentage of properly escaped output (48%). This could lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is not adequately sanitized before being displayed, particularly for the 27 identified output points.
Key Concerns
- Low percentage of properly escaped output
AJAX File Upload Security Vulnerabilities
AJAX File Upload Code Analysis
Output Escaping
Data Flow Analysis
AJAX File Upload Attack Surface
AJAX Handlers 2
Shortcodes 1
WordPress Hooks 7
Maintenance & Trust
AJAX File Upload Maintenance & Trust
Maintenance Signals
Community Trust
AJAX File Upload Alternatives
Get Filesize Shortcode
get-filesize-shortcode
"Get Filesize Shortcode" is a simple shortcode to get filesize of a file( eg. PDF, JPG, PNG ... ).
Contact Form By Mega Forms – Drag and Drop Form Builder
mega-forms
Contact form builder that allows you to create forms for any purpose. Drag & drop form fields to build modern, professional contact forms in minutes.
Documents Shortcode
documents-shortcode
A [documents] shortcode which will display a list of attached files, with file type icons, and linked to the files for easy downloading.
Social Accounts
social-accounts
Add a new section under Settings for your social accounts. The order and the images can be customized with ease.
Frontend File Search and Secured Lite
frontend-file-search-and-secured-lite
Frontend File Search and Secured Lite lets you expose a real-time file search interface on the front end of your WordPress site.
AJAX File Upload Developer Profile
12 plugins · 670 total installs
How We Detect AJAX File Upload
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/ajax-file-upload/includes/js/main.js/wp-content/plugins/ajax-file-upload/includes/css/style.css/wp-content/plugins/ajax-file-upload/includes/js/main.jsajax-file-upload/includes/js/main.js?ver=ajax-file-upload/includes/css/style.css?ver=HTML / DOM Fingerprints
afu-dropzoneafu-upload-buttonafu-input-fileafu-remove-fileafu-loadingafu-errorafu-success<!-- START AJAX FILE UPLOAD --><!-- END AJAX FILE UPLOAD --><!-- AJAX FILE UPLOAD SHORTCODE START --><!-- AJAX FILE UPLOAD SHORTCODE END -->+2 moredata-unique-identifierdata-max-sizedata-allowed-extensionsdata-permissionsdata-on-success-alertdata-on-success-set-input-value+13 morewindow.ajax_file_upload_settingswindow.afu_upload_nonce/wp-json/ajax-file-upload/v1/upload[ajax-file-upload