Does WP2Cloud have any unpatched vulnerabilities?

No. All known vulnerabilities in WP2Cloud have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is WP2Cloud compatible with WordPress 3.9.40?

According to WordPress.org data, WP2Cloud 1.4.0 has been tested up to WordPress 3.9.40. Check the plugin's changelog for the latest compatibility information.

How often is WP2Cloud updated?

WP2Cloud was last updated on Aug 14, 2014. Frequent updates are generally a positive security signal.

What is WP2Cloud's security score?

WP2Cloud has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

WP2Cloud Security & Risk Analysis

wordpress.org/plugins/wp2cloud-wordpress-to-cloud

Now WordPress site can store all its content (pages and media) in cloud. This makes site powered by enormous scale and reliability of cloud storage.

10 active installs v1.4.0 PHP + WP 3.3.2+ Updated Aug 14, 2014

amazonawscloudcloud-storages3

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is WP2Cloud Safe to Use in 2026?

Generally Safe

Score 85/100

WP2Cloud has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago

Risk Assessment

The "wp2cloud-wordpress-to-cloud" plugin v1.4.0 exhibits a generally good security posture based on the provided static analysis. It boasts no known vulnerabilities (CVEs) and no recorded critical or high-severity issues in its history. The plugin demonstrates an effort towards secure coding practices by implementing a decent number of capability checks and a single nonce check, crucial for protecting its entry points. Furthermore, a high percentage of its SQL queries utilize prepared statements, significantly reducing the risk of SQL injection vulnerabilities.

Key Concerns

Low percentage of properly escaped output
Moderate number of file operations without context
Single entry point (AJAX) has no explicit auth check listed

Vulnerabilities

None known

WP2Cloud Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

WP2Cloud Code Analysis

Dangerous Functions

Raw SQL Queries

40 prepared

Unescaped Output

10 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

85% prepared47 total queries

Output Escaping

26% escaped39 total outputs

Data Flows

All sanitized

Data Flow Analysis

3 flows

wp2cloud_settings (setoptions.php:68)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

WP2Cloud Attack Surface

Entry Points2

Unprotected0

AJAX Handlers 1

authwp_ajax_wp2cloud_movewp2cloud-move.php:114

Shortcodes 1

[WP2CLOUD] wp2cloud.php:285

WordPress Hooks 37

actionplugins_loadedwp2cloud.php:140

actionwp_loadedwp2cloud.php:225

actionswitch_blogwp2cloud.php:226

filterwp_handle_uploadwp2cloud.php:228

filterplugin_row_metawp2cloud.php:229

filterwp_update_attachment_metadatawp2cloud.php:231

filterwp_update_attachment_metadatawp2cloud.php:232

filterwp_delete_filewp2cloud.php:233

filterwp_save_image_filewp2cloud.php:234

filterwp_save_image_editor_filewp2cloud.php:235

filterwp_get_attachment_thumb_urlwp2cloud.php:237

filterwp_get_attachment_urlwp2cloud.php:238

filterload_image_to_edit_attachmenturlwp2cloud.php:239

filterbp_core_avatar_folder_urlwp2cloud.php:241

filterbp_core_avatar_folder_dirwp2cloud.php:242

filterbp_core_fetch_avatarwp2cloud.php:243

filterbp_core_fetch_avatar_urlwp2cloud.php:244

filterbp_core_pre_avatar_handle_uploadwp2cloud.php:246

filterbp_core_pre_avatar_handle_cropwp2cloud.php:247

filterbp_core_delete_existing_avatarwp2cloud.php:248

filterbp_activity_content_before_savewp2cloud.php:250

filterbp_album_get_picture_original_urlwp2cloud.php:252

filterbp_album_get_picture_middle_urlwp2cloud.php:253

filterbp_album_get_picture_thumb_urlwp2cloud.php:254

actionbp_album_data_after_savewp2cloud.php:255

actionbp_album_delete_picturewp2cloud.php:256

filterwpseo_xml_sitemap_img_srcwp2cloud.php:258

filterwoocommerce_get_downloadable_file_urlswp2cloud.php:260

filterwoocommerce_file_download_pathswp2cloud.php:261

filterwp2cloud_upload_filewp2cloud.php:263

filterwp2cloud_delete_filewp2cloud.php:264

actionwp2cloud_download_filewp2cloud.php:265

filterwp2cloud_get_file_urlwp2cloud.php:266

filterimage_downsizewp2cloud.php:268

filtermce_external_pluginswp2cloud.php:274

actionadmin_menuwp2cloud.php:278

actionadmin_noticeswp2cloud.php:281

Maintenance & Trust

WP2Cloud Maintenance & Trust

Maintenance Signals

WordPress version tested3.9.40

Last updatedAug 14, 2014

PHP min version

Downloads26K

Community Trust

Rating88/100

Number of ratings18

Active installs10

Alternatives

WP2Cloud Alternatives

Ultimate Media On The Cloud Lite

ultimate-media-on-the-cloud-lite

With Ultimate Media On The Cloud plugin, you can easy migrate/ move and mange wordpress medias on the Cloud Storage Platforms like Amazon S3, Google C …

10 No CVEs

Storage for Woo via S3-Compatible

storage-for-woo-via-s3-compatible

100

Enable secure cloud storage and delivery of your WooCommerce digital products through S3-Compatible storage.

0 No CVEs

Swift Offload

swift-offload

100

Offload WordPress media to Amazon S3, Wasabi, DigitalOcean Spaces, or MinIO. Serve files via CloudFront CDN for faster delivery.

0 No CVEs

Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more

ilab-media-tools

Automatically store media on Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean Spaces + others. Serve CSS/JS assets through CDNs.

7K 1 CVE

WPAdmin AWS CDN

aws-cdn-by-wpadmin

100

Setup Amazon Cloudfront CDN for your website. Now with intuitive layout and more flexibility.

500 1 CVE

Developer Profile

WP2Cloud Developer Profile

Artem Livshits

1 plugin · 10 total installs

trust score

Avg Security Score

85/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect WP2Cloud

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/wp2cloud-wordpress-to-cloud/setoptions.css/wp-content/plugins/wp2cloud-wordpress-to-cloud/wp2cloud-move.css/wp-content/plugins/wp2cloud-wordpress-to-cloud/setoptions.js/wp-content/plugins/wp2cloud-wordpress-to-cloud/wp2cloud-move.js

Script Paths

/wp-content/plugins/wp2cloud-wordpress-to-cloud/setoptions.js/wp-content/plugins/wp2cloud-wordpress-to-cloud/wp2cloud-move.js

Version Parameters

wp2cloud-wordpress-to-cloud/setoptions.css?ver=wp2cloud-wordpress-to-cloud/wp2cloud-move.css?ver=wp2cloud-wordpress-to-cloud/setoptions.js?ver=wp2cloud-wordpress-to-cloud/wp2cloud-move.js?ver=

HTML / DOM Fingerprints

HTML Comments

Copyright (c) 2012-2014, OblakSoft LLC.This program is free software; you can redistribute it and/ormodify it under the terms of the GNU General Public Licenseas published by the Free Software Foundation; either version 2+37 more

Data Attributes

data-wbid

FAQ