by Imaginate Solutions 3.7 (27 reviews)

File Uploads Addon for WooCommerce

Name: File Uploads Addon for WooCommerce
Rating: 3.7 (27 reviews)
Author: Imaginate Solutions

Let customers upload files directly on your WooCommerce product page — no more chasing emails for artwork, logos, prescriptions, or documents.

File Uploads Addon for WooCommerce ranks #3,232 among WordPress.org plugins with 4,000+ active installations, is #480 of 14,124 in the E-commerce category, a 3.7/5 rating from 27 reviews, and was last updated Oct 12, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1

v1.7.7 Current Version v1.7.7

Updated 3 weeks ago Last Update on 12 Oct, 2026

Refreshed 1 week ago Last Refreshed on

#480 of 14,124 in E-commerce Top 5% by installs Downloads -42.4% this week Actively maintained

View on WordPress.org

Rank

#3,232

— No change

Active Installs

4K+

-23.2%

KW Avg Position

35.2

0.2 worse

Downloads

79.4K

+37 today

Support Resolved

— No change

Rating

74%

Review 3.7 out of 5

3.7 (27 reviews)

Next Milestone 5K

Total Progress 98.2%

4K+ 5K+

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 18 more installs to reach 5K+

Rank Changes

Current #3,232

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

3.7

27 reviews

Overall 74%

15 (56%)

3 (11%)

1 (4%)

2 (7%)

6 (22%)

Security History

Source: WPVulnerability

2 known vulnerabilities on record · 2 in the last 24 months · checked 1 month ago

Jan 10, 2026

File Uploads Addon for WooCommerce [woo-addon-uploads] < 1.7.4

CVE-2026-24625 · Fixed in v1.7.4
Feb 17, 2025

File Uploads Addon for WooCommerce [woo-addon-uploads] < 1.7.2

CVE-2024-13622 · Fixed in v1.7.2

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.7.7
Last Updated: Oct 12, 2026
Requires WP: 5.0+
Tested Up To: 7.1
PHP Version: 7.4 or higher
Author: Imaginate Solutions

Support & Rating

Rating: ★ ★ ★ ★ ☆ 3.7
Reviews: 27
Support Threads: 0
Resolved: 0%

Keywords

Product Addons WooCommerce file upload file upload print-on-demand woocommerce addon

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)

Google for WooCommerce

800K+ installs

#74

WooPayments: Integrated WooCommerce Payments

800K+ installs

#76

WooCommerce PayPal Payments

800K+ installs

#82

WooCommerce Stripe Payment Gateway

700K+ installs

#85

WooCommerce Tax (formerly WooCommerce Shipping & Tax)

500K+ installs

#115

View all Ecommerce plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WooCommerce store owners whose products require customers to supply files, such as print-on-demand, personalized gifts, professional services, or healthcare-related orders. It solves the problem of chasing customers by email for artwork, documents, or other files after an order is placed, by letting them upload files directly on the product page.

File upload field on product pages
Thumbnail preview in cart and checkout
Order details integration
Category-level upload control
Filter hook for product-level control
WooCommerce Blocks compatible
HPOS compatible
PHP 8.2 compatible

Frequently Asked Questions

Common questions about File Uploads Addon for WooCommerce

Yes. File Uploads Addon is fully compatible with the modern WooCommerce Cart and Checkout block experience introduced in WooCommerce 7+.

Yes, the plugin is fully compatible with WooCommerce High-Performance Order Storage (HPOS).

The free version supports category-level control (from WooCommerce Settings) and also supports a developer filter to restrict uploads to specific product IDs: add_filter( 'wau_include_product_ids', 'wau_include_only_product', 10, 1 ); function wau_include_only_product( $pids ) { return array( 310, 315 ); // Add your product IDs here } For a no-code per-product toggle, upgrade to the Pro version.

Multiple file uploads are available in the Pro version.

Uploaded files appear directly on the WooCommerce order details screen. In the Pro version, files are also sent as email attachments with the new order notification.

For improved privacy, the plugin tries to store new customer uploads in a private folder outside the public web root. The default location is: <parent-of-document-root>/wau-private-uploads/<site-specific-folder>/ The site-specific folder includes the site host, blog ID, and a short hash. This keeps separate WordPress installs and subdomain stores from sharing the same private upload folder. For example, a store at shop.example.com may use a folder similar to: /home/account/wau-private-uploads/shop-example-com-1-a1b2c3d4e5f6/

Some shared or managed hosts do not allow WordPress to create folders outside the public web root. If private storage is not available, the plugin stores new uploads as authenticated encrypted containers with opaque names under: /wp-content/uploads/wau-uploads/encrypted/<site-specific-folder>/ The site-specific folder uses the site host, blog ID, and a short hash so subdomain and multisite stores do not share encrypted storage. The original customer filename is not used as the container filename, and plaintext upload contents are never written to that directory. Direct requests can retrieve only authenticated ciphertext, which is decrypted exclusively by the plugin's authorized download handler. Files uploaded before this update are moved to private storage when available. Otherwise, they are encrypted and verified in small batches, and each public plaintext original is deleted only after its encrypted copy matches the original byte size and SHA-256 hash. While public plaintext files are still awaiting migration, the plugin continues to harden the legacy folder's .htaccess and web.config protection files where supported. On Nginx, Caddy, OpenLiteSpeed, or similar servers, directory-level .htaccess files may not be honored, so your host should temporarily block direct web access to: /wp-content/uploads/wau-uploads/ The plugin's secure download links will continue to serve authorized legacy files through WordPress. On Nginx, use a precedence-safe prefix rule inside the relevant server block: location ^~ /wp-content/uploads/wau-uploads/ { deny all; } OpenLiteSpeed and Caddy use different configuration formats; share the displayed URL path with your host instead of copying the Nginx rule. On Apache or LiteSpeed, the protection file can be present even when the server is configured to ignore it. While public plaintext files remain, test a known legacy file URL and confirm that it returns HTTP 403 or 404. The System Status page keeps this verification visible until migration is complete. You can also review the current storage status and recommended action items from WooCommerce admin under Addon Upload Settings > System Status.

Yes. If your host provides a writable private folder outside the public web root, add the following line to your wp-config.php file: define( 'WAU_PRIVATE_UPLOAD_DIR', '/absolute/private/path/' ); Replace /absolute/private/path/ with the path provided by your host. The plugin will create a site-specific subfolder inside that path unless the path already ends with the generated site-specific folder name. The path must be absolute. The plugin resolves it after creation and rejects it if it points back inside the detected document root, WordPress directory, or public uploads directory. When the document root cannot be determined safely, automatic path selection is disabled and a manually configured path is required.

Existing files in wp-content/uploads/wau-uploads/ remain accessible to authorized users through the plugin's secure download handler. The plugin migrates them in small batches during normal site activity. It moves them outside the web root when private storage is available; otherwise, it converts them into opaque authenticated encrypted containers and deletes the verified public plaintext originals. Existing order links that already use the plugin's secure download handler continue to work. Older direct links to /wau-uploads/ are rewritten to secure download links when displayed in order metadata. Logged-in customers are authorized through order ownership. Guest customers are authorized using the WooCommerce order key included in their generated download link. Each new upload also has its own access key. The encryption key is stored in the WordPress database and is not embedded in the encrypted files. Back up the WordPress database and uploaded files together; encrypted fallback files cannot be recovered without that database key.

The plugin supports JPG, PNG, GIF, and WebP image uploads. A 10 MB security ceiling is applied by default and can be adjusted by developers with the wau_max_upload_size filter. For additional file types or image size/resolution controls, see the Pro version.