AutoAltify Security & Risk Analysis

wordpress.org/plugins/autoaltify

Auto-generate missing ALT text for WordPress image attachments with multiple generation modes, bulk operations, and developer hooks.

0 active installs v1.1.0 PHP 8.2+ WP 5.0+ Updated Dec 23, 2025
alt-textautomatedbulk-actionsmedia-libraryseo
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is AutoAltify Safe to Use in 2026?

Generally Safe

Score 100/100

AutoAltify has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The autoaltify v1.1.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of critical or high severity taint flows, coupled with 100% of SQL queries using prepared statements and a high rate of output escaping (91%), are excellent indicators of secure coding practices. The presence of nonce and capability checks further reinforces this, as does the limited attack surface consisting of a single AJAX handler with appropriate authentication checks.

Key Concerns

  • Slightly unescaped output detected
  • Single file operation detected
Vulnerabilities
None known

AutoAltify Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

AutoAltify Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
32 escaped
Nonce Checks
1
Capability Checks
3
File Operations
1
External Requests
0
Bundled Libraries
0

Output Escaping

91% escaped35 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
show_admin_notices (includes\Admin\Admin.php:503)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

AutoAltify Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_autoaltify_bulk_runincludes\Admin\Admin.php:78
WordPress Hooks 10
actionplugins_loadedautoaltify.php:58
actionadmin_menuincludes\Admin\Admin.php:66
actionadmin_initincludes\Admin\Admin.php:67
filterbulk_actions-uploadincludes\Admin\Admin.php:70
filterhandle_bulk_actions-uploadincludes\Admin\Admin.php:71
filtermanage_upload_columnsincludes\Admin\Admin.php:74
actionmanage_media_custom_columnincludes\Admin\Admin.php:75
actionadmin_enqueue_scriptsincludes\Admin\Admin.php:81
actionadmin_noticesincludes\Admin\Admin.php:84
actionadd_attachmentincludes\Public\Public_Hooks.php:60
Maintenance & Trust

AutoAltify Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 23, 2025
PHP min version8.2
Downloads135

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

AutoAltify Developer Profile

Vishal Padhariya

3 plugins · 60 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect AutoAltify

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/autoaltify/assets/css/admin-style.css/wp-content/plugins/autoaltify/assets/js/admin-script.js
Script Paths
/wp-content/plugins/autoaltify/assets/js/admin-script.js
Version Parameters
autoaltify/assets/css/admin-style.css?ver=autoaltify/assets/js/admin-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
autoaltify-settings-wrap
HTML Comments
<!-- AutoAltify Settings --><!-- Bulk actions meta box --><!-- AutoAltify generated ALT text -->
Data Attributes
data-action="autoaltify_bulk_run"data-nonce="autoaltify_bulk_nonce"
JS Globals
autoaltify_ajax_object
FAQ

Frequently Asked Questions about AutoAltify