Make WordPress Core

Opened 2 months ago

Last modified 2 months ago

#62821 new defect (bug)

Plupload Plugin - Outdated and No Longer Maintained, Request for Replacement or Update

Reported by: shreyasgeotab's profile shreyasgeotab Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version: 6.7.1
Component: Upload Keywords:
Focuses: Cc:

Description

The Plupload plugin has not received any updates for a long time and appears to no longer be actively maintained. As a result, it poses a potential security risk due to the lack of patches for known vulnerabilities and outdated dependencies.

Request:

  1. Are there any plans or ongoing efforts to replace or update the Plupload plugin in the WordPress project?
  2. Are there any replacements or alternatives currently in development or in the pipeline for use in WordPress that could mitigate potential security risks?
  3. If no alternatives are being considered, can we explore other actively maintained and secure file upload plugins for WordPress?

Change History (1)

#1 @ayeshrajans
2 months ago

I agree. The last commit on plupload seems to be four years ago. Although that doesn't necessarily require us to replace it, I think we can indeed consider a replacement.

filepond seems like a nice replacement.

Note: See TracTickets for help on using tickets.