Featured Image from URL (FIFU)

90 Quality Score

Active Installs

21/30

With 70,000 active installs and an overall score of 83/100, FIFU has a moderate but dedicated user base that is well below category leaders like the Stripe gateway at 700,000 installs.

Update Freshness

25/25

Last updated on 2026-02-02 and tested against WordPress 6.9.4, FIFU is clearly being maintained aggressively and kept current with the latest core release.

User Rating

14/15

A 92/100 rating across 262 reviews indicates consistently positive user experiences, signalling that the plugin reliably solves its specific use case.

Support Health

15/15

Only 5 total support threads with a 40% resolution rate is a red flag for volume, though the small number may simply reflect that the plugin works well enough that few users need help.

WP Compatibility

15/15

Requiring only WordPress 5.6 and showing no PHP version constraint, FIFU runs on virtually any modern WordPress installation, including the very latest 6.9.4 release.

Scores higher than 99% of indexed plugins

About

Use remote media as the featured image and beyond.

Active Installs 60k+

Rating ★★★★½ 4.6/5

Last Updated 2026-09-09 11:43am GMT

Requires WordPress 5.6+

Tested Up To 7.1

Requires PHP 8.1+

Security History

14 known vulnerabilities, all patched

2 High 12 Medium

Most recent: August 12, 2026

View details ▸

Featured Image from URL (FIFU) <= 5.3.3 - Authenticated (Contributor+) Stored Cross-site Scripting Medium

August 12, 2026 Patched in ["6.0.0"] CVE-2026-73340

Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url' Medium

January 9, 2026 Patched in ["5.3.2"] CVE-2025-13393

Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields Medium

October 6, 2025 Patched in ["5.2.8"] CVE-2025-7400

Featured Image from URL (FIFU) <= 5.2.7 - Missing Authorization to Password Protected Post Disclosure Medium

September 25, 2025 Patched in ["5.2.8"] CVE-2025-9984

Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection Medium

September 25, 2025 Patched in ["5.2.8"] CVE-2025-10037

Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File Medium

September 25, 2025 Patched in ["5.2.8"] CVE-2025-9985

Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection Medium

September 25, 2025 Patched in ["5.2.8"] CVE-2025-10036

Featured Image from URL <= 4.8.2 - Missing Authorization Medium

July 5, 2024 Patched in ["4.8.3"] CVE-2024-37516

Featured Image from URL <= 4.8.1 - Missing Authorization Medium

June 28, 2024 Patched in ["4.8.2"] CVE-2024-37276

Featured Image from URL (FIFU) <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via fifu_input_url Medium

February 19, 2024 Patched in ["4.6.3"] CVE-2024-1496

Featured Image from URL (FIFU) <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via featured image alt text Medium

December 14, 2023 Patched in ["4.5.4"] CVE-2023-6561

Featured Image from URL (FIFU) <= 4.0.0 - Stored Cross-Site Scripting Medium

July 5, 2022 Patched in ["4.0.1"] CVE-2022-2278

Featured Image from URL (FIFU) <= 3.9.9 - Cross-Site Request Forgery High

June 30, 2022 Patched in ["4.0.0"] CVE-2022-2241

Featured Image from URL <= 2.7.7 - Missing Authorization on REST API routes High

December 24, 2019 Patched in ["2.7.8"]

What It Does

Featured Image from URL (FIFU) lets you set any remotely hosted image or video as a WordPress post or WooCommerce product featured image, sidestepping the need to upload media to your own server. It also handles product galleries, video thumbnails, and WooCommerce-specific image fields directly from external URLs. This is particularly useful when you do not own or want to store the source media files locally.

Who It's For

This plugin is best for dropshippers, affiliate marketers, real estate agents, and content curators who pull product or listing images from third-party sources rather than hosting them. It also fits news aggregators and multi-vendor marketplaces where storing every contributor's image locally would be impractical or costly.

Who Should Skip It

If you have a small site with a handful of original photos or full control over your own media library, FIFU adds unnecessary complexity and a potential point of failure when external servers go down. Sites handling sensitive or licensed content should also avoid relying on hot-linked images, since bandwidth and usage rights become harder to manage.

The Bottom Line

FIFU earns an 83/100 overall quality score by doing one specific thing well and keeping up with WordPress core releases, making it a solid choice for anyone sourcing images from outside their own server. The weak support volume and the inherent risk of depending on third-party URLs are real trade-offs worth weighing. For its target audience of dropshippers, affiliates, and catalog curators, it is a practical solution; for everyone else, the default WordPress media library is probably sufficient.

Related Plugins

Germanized for WooCommerce 91/100

Pick this instead if your store needs Germany-specific legal compliance, invoice formats, and tax handling rather than external image hosting.

PDF Invoices & Packing Slips for WooCommerce 90/100

Choose this if you need to generate professional PDF invoices and packing slips, which is an entirely different functional category from featured image management.

Customer Reviews for WooCommerce 89/100

Opt for this if social proof and review collection are your gap, not media handling for product listings.

WooCommerce Stripe Payment Gateway 88/100

Select this if you actually need to accept credit card payments, which is unrelated to featured image functionality.

Mercado Pago payments for WooCommerce 88/100

Pick this if your store serves Latin American markets and needs Mercado Pago as a payment processor, not external image support.