shouldiuse.io

Categories

VERDICT

Uploadcare Review

Depends

Should I use Uploadcare?

Uploadcare provides companies with simple, powerful, developer-friendly building blocks to handle file uploading, processing, and delivery. A complete out-of-the-box solution, built for engineers by engineers. - uploadcare.com

· 1 month ago

Buy it if your app has real user file uploads and a developer to wire the API; the free tier makes trying it cheap. Skip it if you just need basic file hosting or only image transforms — plain storage or Cloudinary fits better and cheaper.

Confidence

Medium. Based on ~20 public sources; individual review counts are small (10 on G2, 2 on Trustpilot), so ratings carry limited weight.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Pro$79/month
BusinessNot listed in sources

Best for

  • Apps with heavy user-generated uploads
  • Dev teams wanting upload+processing+CDN in one
  • SaaS needing image/video optimization
  • Indie devs wanting a simple upload API

Not for

  • Simple sites needing basic file hosting
  • Image-transformation-only needs — Cloudinary fits better
  • Non-technical buyers without a developer
  • High-volume media apps on tight budgets

Gotchas - check before you buy

high

WordPress plugin had CVE-2024-35636 (CSRF, medium) plus an unauthenticated arbitrary file upload flaw.

medium

Costs climb with usage — Bytescale's whole sales pitch is that Uploadcare gets expensive at scale.

medium

Company disclosed and closed a potential breach involving text/html files — patched, but worth knowing.

low

Switching means migrating stored files and rewriting delivery URLs — competitors run dedicated switch pages.

Pros and cons

Pros

  • Free tier; pay-as-you-grow after that
  • Handles uploading, storing, processing, and delivery in one service
  • Stack-agnostic uploader library works across frameworks
  • Capterra reviewers praise its simplicity
  • 4.8/5 Capterra rating across 29 reviews

Cons

  • Free but expensive when usage grows, per competitor comparison
  • Trustpilot sits at 2.9/5 — though from only 2 reviews
  • Tiny review base: 10 reviews on G2
  • WordPress plugin has disclosed security vulnerabilities

Sources & method

- 13 sources - Security whitepaper published; WordPress plugin had two disclosed vulnerabilities; a text/html file breach was disclosed and closed.

official x2review x6security x3news x2
  • CVE-2024-35636 — WordPress plugin CSRF, Cross-Site Request Forgery, medium severity, in the File Uploader and Adaptive Delivery (beta) WordPress plugin.
  • Unauthenticated arbitrary file upload — WordPress plugin, Via add-image-data; made unauthenticated file uploads possible, per WPScan.
  • Closed potential breach (text/html files), Uploadcare publicly disclosed and closed a potential security breach involving text/html files.

Key stats

  • Value for money: 3/5

    Rating

  • $0

    Starting price

  • 13

    Sources

  • Analyzed

  • Value for money: 3/5. Free start, but competitor claims it's expensive at scale
  • Ease of use: 4/5. Reviewers repeatedly call it simple and developer-friendly
  • Feature depth: 4/5. Full upload-process-deliver stack, many integrations and SDKs
  • Support quality: 4/5. GetApp rates customer support 4.3/5
  • Security posture: 3/5. Whitepaper published, but plugin CVEs and closed breach
  • 4.8/5 Capterra rating 29 reviews
  • 4.6/5 G2 rating 10 reviews
  • $79/mo Starting price Pro plan; Free tier at $0
  • 2011 Founded Acquired by Tiugo Technologies, 2024

Pricing

Free

$0

  • Start free, pay as you grow
  • Image and video optimization tools included

Pro

$79/month

  • Listed on SoftwareFinder
  • For growing usage

Business

Not listed in sources

  • Top tier
  • Exact price not shown in reviewed sources

Security

Security whitepaper published; WordPress plugin had two disclosed vulnerabilities; a text/html file breach was disclosed and closed.

  • CVE-2024-35636 — WordPress plugin CSRFCross-Site Request Forgery, medium severity, in the File Uploader and Adaptive Delivery (beta) WordPress plugin.⁸
  • Unauthenticated arbitrary file upload — WordPress pluginVia add-image-data; made unauthenticated file uploads possible, per WPScan.⁹
  • Closed potential breach (text/html files)Uploadcare publicly disclosed and closed a potential security breach involving text/html files.10

What users say

Users praise the simple, developer-friendly API and indie devs call it a good middle ground, though total review volume is small.

“Uploadcare is the best SaaS finding I ever had.”
G2 review
“Greatest thing about Uploadcare is that it's simple”
Capterra review
“Uploadcare. Good middle ground. Simple API”
Reddit, r/IndieDev

Companies that use it

  • SnuggPro
  • SupervisionAssist⁴
Full analysis

Based on ~20 public sources; individual review counts are small (10 on G2, 2 on Trustpilot), so ratings carry limited weight.

Solid developer file-upload stack with a free tier; great for apps with user uploads, overkill for simple hosting needs.

Methodology

Based on ~20 public sources; individual review counts are small (10 on G2, 2 on Trustpilot), so ratings carry limited weight.

Read how a report is made.

Sources

  1. review
  2. review
  3. review
  4. review
  5. official
  6. review
  7. news
  8. security
  9. security
  10. security
  11. news
  12. official
  13. review

Add this review to your site

This check for Uploadcare says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.