Skip to content
StaleWP

Replace now Radar no. 06 · Quiet

Add From Server

By Dion Hulse

What it does: Imports files already on the server into the media library, such as FTP uploads.

Why it’s listed: It reads files on your server, and it was last updated in 2020. It is tested only up to WordPress 5.5. Three public advisories are on record, all listed as fixed. WP-CLI’s media import command covers the same job from the command line.

View on WordPress.org ↗ Checked Reviewed by Abhishek Deshpande

Active installs
60k+
Last updated
2020-12-11
Tested up to
5.5.24
Rating
4.6 / 5 (239)
Version
3.4.5
Maintainers
1

Is Add From Server still maintained?

It has gone over two years without an update, and it has a second warning sign: reads server files.

Quiet: No update for over a year.

Placements are our opinion, based on public evidence. Risk here means a plugin may not get a fix if a problem appears. It doesn’t mean we found a flaw, unless we show an advisory. Going quiet alone never puts a plugin in Replace now.

Updates No release since 2020-12-11. That was 5 yr 11 mo before our check. WordPress.org plugin directory · checked 2026-10-31
Compatibility Tested up to WordPress 5.5.24. WordPress 7.1.4 was current on 2026-10-31. WordPress.org plugin directory · checked 2026-10-31
Security 3 public advisories on record. Details are below. wpvulnerability.net · checked 2026-10-31
Reviews The latest 10 reviews average 4.8 stars, against 4.6 overall. None of them gave 1 or 2 stars. Newest activity: 2024-09-04. We see no negative trend. WordPress.org reviews · checked 2026-10-31
Maintainers 1 listed contributor. No recent support threads. WordPress.org plugin directory · checked 2026-10-31
Usage 1,974 downloads in the last 30 days, including updates. 87.56% of sites run version 3.4. WordPress.org stats · checked 2026-10-31

What to do next

  1. Back up the site, and use a staging copy for any change.
  2. Try one of the alternatives below, then remove this plugin.

If it works today, no need to panic, but don’t leave this for long.

Recommended alternatives to Add From Server

WP-CLI media import ↗

Use wp media import where your host provides WP-CLI.

No extra plugin needed

Media Sync ↗

Add files already on the server to the media library.

50k+ installs · 4.7 stars · Updated 2026-08-15 · Tested 7.1.4

Bulk Media Register ↗

Register server files in the media library in bulk.

8k+ installs · 4.5 stars · Updated 2026-10-28 · Tested 7.1.4

Each listed plugin was updated in the last six months, is tested with WordPress 7.0 or newer, and had no open advisory in WPVulnerability when we checked. We have not tried them ourselves. No one pays to appear here.

Security record

AdvisorySeverityFixed in
Path traversal Not scored Listed for 3.3.3 and older
Path traversal Not scored 3.4.3
CVE-2016-10914 ↗
Cross-site request forgery 		High (8.8) 3.3.2

wpvulnerability.net · checked 2026-10-31

A listed advisory does not mean the current version is exploitable.

Latest reviews

Dates show last activity. Titles are written by WordPress.org users.

Also on this radar: Media and uploads

No one can pay to appear on the radar or to change a placement. How we stay independent

Something wrong, or updated since we checked? Suggest a correction

StaleWP Newsletter

What changed in the plugin directory, twice a month. Free, unsubscribe anytime.

See how we handle your email on our Legal page.