Convert to AVIF and Optimise Security & Risk Analysis

wordpress.org/plugins/convert-to-avif-and-optimise

Convert and optimise your WordPress media library to AVIF while keeping every reference to your images in sync.

10 active installs v1.0.0 PHP 7.4+ WP 6.0+ Updated Nov 12, 2025
avifimagesoptimisationperformance
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Convert to AVIF and Optimise Safe to Use in 2026?

Generally Safe

Score 100/100

Convert to AVIF and Optimise has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The 'convert-to-avif-and-optimise' plugin v1.0.0 exhibits a strong security posture based on the provided static analysis and vulnerability history. The absence of dangerous functions, file operations, and external HTTP requests is a significant positive. Furthermore, all SQL queries are properly prepared, and the vast majority of outputs are correctly escaped, indicating good development practices for preventing common web vulnerabilities like SQL injection and cross-site scripting (XSS). The presence of nonce and capability checks on its entry points, though limited in number, further strengthens its defenses against unauthorized access and actions. The plugin also has a clean vulnerability history with no recorded CVEs, suggesting a history of secure development and maintenance. While the attack surface is small and entirely protected, the lack of taint analysis results might mean that complex or indirect data flows were not thoroughly examined, or that the plugin's functionality inherently doesn't lend itself to such analysis. However, based solely on the presented data, this plugin appears to be well-secured.

Vulnerabilities
None known

Convert to AVIF and Optimise Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Convert to AVIF and Optimise Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
6 prepared
Unescaped Output
1
17 escaped
Nonce Checks
3
Capability Checks
4
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared6 total queries

Output Escaping

94% escaped18 total outputs
Attack Surface

Convert to AVIF and Optimise Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_bdaco_fetch_queueincludes\class-bdaco-plugin.php:177
authwp_ajax_bdaco_process_attachmentincludes\class-bdaco-plugin.php:178
WordPress Hooks 6
actionadmin_menuincludes\class-bdaco-plugin.php:172
actionadmin_initincludes\class-bdaco-plugin.php:173
actionadmin_enqueue_scriptsincludes\class-bdaco-plugin.php:174
actionadmin_post_bdaco_run_bulk_optimisationincludes\class-bdaco-plugin.php:175
actionadmin_noticesincludes\class-bdaco-plugin.php:176
filterwp_generate_attachment_metadataincludes\class-bdaco-plugin.php:180
Maintenance & Trust

Convert to AVIF and Optimise Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedNov 12, 2025
PHP min version7.4
Downloads165

Community Trust

Rating20/100
Number of ratings1
Active installs10
Developer Profile

Convert to AVIF and Optimise Developer Profile

Bicknell Digital

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Convert to AVIF and Optimise

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/convert-to-avif-and-optimise/assets/css/bdaco-admin.css/wp-content/plugins/convert-to-avif-and-optimise/assets/js/bdaco-admin.js
Script Paths
/wp-content/plugins/convert-to-avif-and-optimise/assets/js/bdaco-admin.js
Version Parameters
convert-to-avif-and-optimise/assets/css/bdaco-admin.css?ver=convert-to-avif-and-optimise/assets/js/bdaco-admin.js?ver=

HTML / DOM Fingerprints

Data Attributes
data-bdaco-queuedata-bdaco-progress
JS Globals
bdacoBulk
FAQ

Frequently Asked Questions about Convert to AVIF and Optimise