Uploader Anywhere Security & Risk Analysis

wordpress.org/plugins/uploader-anywhere

Inserts uploader modal window links anywhere in the admin area.

10 active installs v1.0.1 PHP + WP 3.5+ Updated Nov 26, 2014
adminadmin-pageadmin-panelmodaluploader
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Uploader Anywhere Safe to Use in 2026?

Generally Safe

Score 85/100

Uploader Anywhere has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago
Risk Assessment

The 'uploader-anywhere' plugin version 1.0.1 presents a generally positive security posture based on the static analysis. The absence of any recorded vulnerabilities in its history is a strong indicator of its current stability. The code demonstrates good practices by utilizing prepared statements for its single SQL query and includes a reasonable number of capability checks (8) and nonce checks (2), suggesting an effort to secure its functionalities. The limited attack surface, with zero AJAX handlers, REST API routes, shortcodes, or cron events, further contributes to its safety by reducing potential entry points for attackers.

However, a significant concern arises from the taint analysis. All six analyzed flows exhibit unsanitized paths, indicating a potential for unexpected behavior or vulnerabilities if user-supplied data is not handled with extreme care. While no critical or high severity taint flows were reported, the fact that *all* flows are unsanitized warrants further investigation. Additionally, the output escaping is only 50% effective, meaning half of the plugin's outputs are not properly escaped, which could lead to cross-site scripting (XSS) vulnerabilities if user-controlled data is echoed directly to the browser.

In conclusion, 'uploader-anywhere' v1.0.1 has strengths in its limited attack surface and lack of historical vulnerabilities. Nevertheless, the presence of universally unsanitized taint flows and weak output escaping are critical weaknesses that significantly elevate the risk. These issues suggest that the plugin may be susceptible to vulnerabilities, particularly XSS, if user input is not meticulously validated and escaped at every stage of processing.

Key Concerns

  • All taint flows have unsanitized paths
  • Only 50% of outputs are properly escaped
Vulnerabilities
None known

Uploader Anywhere Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Uploader Anywhere Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
1 prepared
Unescaped Output
35
35 escaped
Nonce Checks
2
Capability Checks
8
File Operations
2
External Requests
1
Bundled Libraries
0

SQL Query Safety

100% prepared1 total queries

Output Escaping

50% escaped70 total outputs
Data Flows
6 unsanitized

Data Flow Analysis

6 flows6 with unsanitized paths
__call (include\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Uploader Anywhere Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 78
actionadmin_initinclude\class\boot\UploaderAnywhere_Bootstrap.php:57
actionplugins_loadedinclude\class\boot\UploaderAnywhere_Bootstrap.php:60
actionadmin_noticesinclude\class\boot\UploaderAnywhere_Requirements.php:96
actionadmin_noticesinclude\class\boot\UploaderAnywhere_Requirements.php:142
actionadmin_enqueue_scriptsinclude\class\routine\UploaderAnywhere_Routine_Enqueuer.php:25
filterupload_mimesinclude\class\routine\UploaderAnywhere_Routine_MIMETypes.php:15
actioncurrent_screeninclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionshutdowninclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionnetwork_admin_noticesinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionadmin_noticesinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionshutdowninclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionshutdowninclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionwp_loadedinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actioncurrent_screeninclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionadd_meta_boxesinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
filterwp_insert_attachment_datainclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
filterwp_insert_post_datainclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
filterredirect_post_locationinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actioninitinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionadmin_enqueue_scriptsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionwp_loadedinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actioncurrent_screeninclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionwidgets_initinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
filterwp_mail_content_typeinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
filterwp_mail_frominclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
filterwp_mail_from_nameinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionrestrict_manage_postsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionrestrict_manage_postsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
filterparse_queryinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionadmin_headinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionthe_contentinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionwp_loadedinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actioninitinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionadmin_menuinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionwidgets_initinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actionadmin_headinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
filterscreen_layout_columnsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:7
actioncurrent_screeninclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filteradmin_titleinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_menuinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionnetwork_admin_noticesinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_noticesinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionnetwork_admin_menuinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filtermedia_upload_tabsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filtergettextinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionin_admin_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filteradmin_footer_textinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filterupdate_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filterplugin_row_metainclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionin_admin_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionget_edit_post_linkinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filteradmin_footer_textinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filterupdate_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_headinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_headinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_enqueue_scriptsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_enqueue_scriptsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actioncustomize_controls_print_footer_scriptsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actioncustomize_controls_print_footer_scriptsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_print_footer_scriptsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_print_footer_scriptsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filterscript_loader_srcinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filterstyle_loader_srcinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filterclean_urlinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionafter_switch_themeinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_menuinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionnetwork_admin_menuinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionin_admin_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionin_admin_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filterupdate_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filterupdate_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
filterupdate_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actioncustomize_controls_print_footer_scriptsinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_footerinclude\library\admin-page-framework\uploader-anywhere-admin-page-framework.min.php:27
actionadmin_print_footer_scriptsinclude\library\field-type\UploaderAnywhere_RevealerCustomFieldType.php:42
Maintenance & Trust

Uploader Anywhere Maintenance & Trust

Maintenance Signals

WordPress version tested4.0.38
Last updatedNov 26, 2014
PHP min version
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

Uploader Anywhere Developer Profile

miunosoft

15 plugins · 2K total installs

84
trust score
Avg Security Score
86/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Uploader Anywhere

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/uploader-anywhere/asset/js/uploader-anywhere.js/wp-content/plugins/uploader-anywhere/asset/js/replace-with-uploader-button.js
Script Paths
/wp-content/plugins/uploader-anywhere/asset/js/uploader-anywhere.js/wp-content/plugins/uploader-anywhere/asset/js/replace-with-uploader-button.js

HTML / DOM Fingerprints

JS Globals
window.uploader_anywhere_rules
FAQ

Frequently Asked Questions about Uploader Anywhere