URL Image Importer · Version history
URL Image Importer changelog and version history
- Latest version
- 1.2.4
- Sep 29, 2026 (1 month ago)
- Releases
- 14
- since 2025
- In the last year
- 8
- about one every 46 days
- Tested up to
- WordPress 7.0.8
- PHP 7.4 or later
Releases each year
- 20258 releases
- 20266 releases
20266 releases
URL Image Importer 1.2.4Latest
- Fixed: subscribing to tips from the storage analysis scan now returns you to your results instead of leaving you on the signup confirmation page.
URL Image Importer 1.2.3
- Security: hardened the URL, CSV, XML, and Google Drive image importers against Server-Side Request Forgery (SSRF). Remote images are now fetched through WordPress’s safe HTTP client together with an explicit host check that rejects any URL resolving to an internal, private, loopback, link-local, or…
- Fixed: a “Constant UPLOADBLOGSDIR already defined” PHP warning that could appear on WordPress Multisite, or alongside other plugins that define the same constant.
URL Image Importer 1.2.2
- Redesigned the storage analysis tool with a cleaner, more modern layout — run a free scan of your Media Library to see total usage and a breakdown by file type.
- Refined the importer screens for a more polished, consistent interface.
- Fixed: the storage analysis could display two panels at once after a scan finished.
- Fixed: re-running a scan no longer re-prompts for your email once you’ve dismissed it.
- Fixed: some buttons could lose their rounded corners after being clicked.
URL Image Importer 1.2.1
- Improved ability to import large Google Drive images.
URL Image Importer 1.2
- Added support for importing public Google Drive image file links from the URL importer and CSV importer.
- Added content-based validation for Google Drive downloads so non-images, private/login pages, folders, videos, and Google Workspace document links are skipped instead of imported.
- Improved CSV handling so Google Drive share links without image file extensions are accepted for import preview and validated during import.
- Fixed CSV preview behavior for already-imported URLs so duplicates can be handled by the batch importer and URL mapping export.
URL Image Importer 1.1
- Cleaner image titles: imported images now use the filename without the “.jpg” or “.png” extension as the image’s title and URL handle in your Media Library, matching what WordPress does for a manual upload. Applies to URL, WordPress XML, and CSV imports.
- New URL mapping spreadsheet: after a batch import, you can download a CSV that pairs each original web URL with its new location in your Media Library — handy for find-and-replacing old image links across your posts. Only users with media upload permission can download the file.
- Fixed: the “Download URL Mapping CSV” button could fail in some browsers and show an error page instead of saving the file. The download now works reliably and the saved filename keeps non-English characters intact.
- Improved compatibility for sites running on Windows servers when verifying the mapping download.
- Cleanup: partial mapping files are removed when an import is canceled, and older mapping files are tidied up automatically after a day.
- Removed: a leftover developer test script that was accidentally included in earlier builds. It had no legitimate purpose after install and should not have shipped.
- Removed: an unused developer setup helper script that did not belong in a release.
20258 releases
URL Image Importer 1.0.8
- SECURITY FIX – SVG XSS VULNERABILITY – Fixed: Stored Cross-Site Scripting (XSS) vulnerability via SVG file uploads reported by Wordfence – Security: Implemented whitelist-based SVG sanitization using the enshrined/svg-sanitize library – Security: Extended fallback blacklist to include SVG animation…
URL Image Importer 1.0.7
- Added CSV import functionality for batch image imports from spreadsheets.
- Added XML import functionality to support images from WordPress export files.
- Added import option controls (re-import, preserve date, image-only filter).
- Added new UI tabs for URL Import, CSV Import, and WordPress XML Import.
- Added “Download Sample CSV” helper link for quick template setup.
- Improved batch import performance and error handling.
- General performance improvements and UI refinements. SECURITY FIX – CRITICAL UPDATE
- Fixed: Arbitrary file upload vulnerability reported by Wordfence Threat Intelligence
- Security: Removed reliance on user-controlled Content-Type HTTP headers for file validation
- Security: Implemented proper file validation BEFORE writing to disk using wp_check_filetype_and_ext()
- Security: Added actual image content validation using getimagesize()
- Security: Enforced strict mime type checking against WordPress allowed mime types
- Security: Files are now validated in temporary location before moving to uploads directory
- Security: Added unique filename generation to prevent file overwrites
- Hardened: Multiple layers of validation ensure only legitimate image files can be imported
URL Image Importer 1.0.6
- Added PSR-4 autoloading with Composer for improved code organization
- Added namespace support: UrlImageImporter\Core, \Admin, \FileScan, \Importer, \Ajax, \Utils
- Code quality improvements and bug fixes
URL Image Importer 1.0.3
URL Image Importer 1.0.2
URL Image Importer 1.0.1
URL Image Importer 1.0.0
URL Image Importer 1.0
- Initial release
Questions about URL Image Importer’s releases
What is the latest version of URL Image Importer?
1.2.4, released on Sep 29, 2026 (1 month ago). It’s tested up to WordPress 7.0.8 and needs PHP 7.4 or later.
How often is URL Image Importer updated?
8 releases in the last year, about one every 46 days. Its first release on WordPress.org dates from February 2025.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in URL Image Importer’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.