[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6qQSQ_rBn995eOS73zQQFackOxNPA2vPWxGt4Bm7pw0":3,"$fw0g5ceBlYM4RUs391rw9AOIUE3KpRcdU-sjlZqtW7jA":216,"$foVrWtNwyI6hBrX93aEFW0-Q2JCgGTCsyHwCE_iyX-2o":221},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":11,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":32,"crawl_stats":28,"alternatives":38,"analysis":143,"fingerprints":191},"easy-optimizer","Easy Optimizer – Lazy-load images, videos & iframes","1.1.0","Uzair","https:\u002F\u002Fprofiles.wordpress.org\u002Feasywpstuff\u002F","\u003Cp>Easy Optimizer is a simple and lightweight plugin that helps improve your website’s performance by:\u003Cbr \u002F>\n– Lazy-loading images, background images, iframes and videos\u003Cbr \u002F>\n– Preloading pages to speed up navigations\u003Cbr \u002F>\n– Optionally rewriting image URLs to a ShortPixel CDN for next-gen format delivery (WebP\u002FAVIF) and optimization\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Serve images in next-gen formats via ShortPixel CDN (WebP\u002FAVIF when supported).\u003C\u002Fli>\n\u003Cli>Lazy-load images and iframes to reduce initial page weight.\u003C\u002Fli>\n\u003Cli>Lazy-load background images and HTML5 videos.\u003C\u002Fli>\n\u003Cli>Page preloading to improve perceived navigation speed.\u003C\u002Fli>\n\u003Cli>Elementor compatible.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin optionally rewrites image URLs to ShortPixel’s CDN to serve optimized images:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Service: ShortPixel CDN (https:\u002F\u002Fcdn.shortpixel.ai\u002F)\u003C\u002Fli>\n\u003Cli>What it does: When “Image Optimization” is enabled in plugin settings, image URLs on your site (for example, https:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimage.jpg) are rewritten so that visitors’ browsers request images from ShortPixel’s CDN (for example, https:\u002F\u002Fcdn.shortpixel.ai\u002Fspai\u002F…\u002Fhttps:\u002F\u002Fexample.com\u002Fwp-content\u002Fuploads\u002Fimage.jpg). This enables ShortPixel to serve optimized, next-gen formats like WebP\u002FAVIF where supported.\u003C\u002Fli>\n\u003Cli>What data is sent: Only the image URL requested by the visitor’s browser is requested from ShortPixel’s CDN. No additional site data or personal user data is sent by the plugin itself.\u003C\u002Fli>\n\u003Cli>Why: Using the CDN can reduce image weight and speed delivery of images.\u003C\u002Fli>\n\u003Cli>Links: ShortPixel Privacy Policy: https:\u002F\u002Fshortpixel.com\u002Fprivacy\u003Cbr \u002F>\n     ShortPixel Terms of Service: https:\u002F\u002Fshortpixel.com\u002Fterms-of-service\u003C\u002Fli>\n\u003C\u002Ful>\n","Convert images to WebP\u002FAVIF via ShortPixel CDN, lazy-load images\u002Fbackgrounds\u002Fiframes\u002Fvideos and preload pages for faster navigation.",100,5282,74,3,"2025-11-17T15:55:00.000Z","6.8.5","5.0","5.6",[20,21,22,23,24],"elementor","images","lazyload","performance","preload","https:\u002F\u002Feasywpstuff.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.1.0.zip",0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":11,"avg_patch_time_days":36,"trust_score":11,"computed_at":37},"easywpstuff",4,2200,7,"2026-05-19T17:11:47.830Z",[39,60,81,100,124],{"slug":40,"name":41,"version":42,"author":43,"author_profile":44,"description":45,"short_description":46,"active_installs":47,"downloaded":48,"rating":49,"num_ratings":50,"last_updated":51,"tested_up_to":52,"requires_at_least":53,"requires_php":54,"tags":55,"homepage":57,"download_link":58,"security_score":59,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"lazy-load-background-images-for-elementor","Lazy Load Elementor Background Images","1.1.2","James Revillini","https:\u002F\u002Fprofiles.wordpress.org\u002Fjrevillini\u002F","\u003Cp>A major drawback to using Elementor is that the background images used for sections and columns are all loaded when the page loads. Using a plugin like WP Rocket or BJ Lazy Load will not solve this issue. \u003Cstrong>This plugin fixes that.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The plugin is dead simple. No extra database tables or queries, no admin screens with difficult options to understand, and no dependencies other than that the page is designed with Elementor. It injects a little JavaScript and CSS on the front-end. The CSS hides all backgrounds on all non-animated sections and columns. The JavaScript detects the visitor’s scrolling and starts loading the background images as they get close to those sections\u002Fcolumns using the WayPoints JS library (which is packaged with Elementor).\u003C\u002Fp>\n\u003Cp>\u003Cstrong>New\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>support has been added for the following Elementor Pro elements: Flip Box and Slider – thanks for the idea @dollhauss\u003C\u002Fli>\n\u003C\u002Ful>\n","Lazy load background images of Elementor sections, columns, and some elements. Compatible with Elementor Pro.",1000,13030,72,8,"2020-03-17T22:34:00.000Z","5.3.21","4.7","7.0",[56,20,22,23],"background-images","https:\u002F\u002Fjames.revillini.com\u002Flazy-load-elementor-background-images","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flazy-load-background-images-for-elementor.zip",85,{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":70,"num_ratings":71,"last_updated":72,"tested_up_to":73,"requires_at_least":74,"requires_php":75,"tags":76,"homepage":79,"download_link":80,"security_score":59,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"native-image-lazy-loading","Native Image Lazy Loading","1.1","Justin Downey","https:\u002F\u002Fprofiles.wordpress.org\u002Fjdm-labs\u002F","\u003Cp>This plugin adds the \u003Ccode>loading\u003C\u002Fcode> attribute to IMG tags found when filtering \u003Ccode>the_content()\u003C\u002Fcode> to support native image lazy loading.\u003C\u002Fp>\n\u003Cp>For more information about lazy loading images using this new native browser image attribute, check out this article: \u003Ca href=\"https:\u002F\u002Faddyosmani.com\u002Fblog\u002Flazy-loading\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Faddyosmani.com\u002Fblog\u002Flazy-loading\u002F\u003C\u002Fa> and for a little more depth into what we’re doing here, check out our \u003Ca href=\"https:\u002F\u002Fjdmdig.it\u002F30nXp7h\" rel=\"nofollow ugc\">explainer post\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Historically, to limit the impact offscreen images have on page load times, developers have needed to use a JavaScript library (like \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FaFarkas\u002Flazysizes\" rel=\"nofollow ugc\">LazySizes\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fwww.andreaverlicchi.eu\u002Flazyload\u002F\" rel=\"nofollow ugc\">Vanilla-LazyLoad\u003C\u002Fa>) in order to defer fetching these images until a user scrolls near them.  What if the browser could avoid loading these offscreen images for you?\u003C\u002Fp>\n\u003Cp>The \u003Ccode>loading\u003C\u002Fcode> attribute instructs a browser to defer loading offscreen images until users scroll near them. It comes in three flavors: \u003Cstrong>eager\u003C\u002Fstrong>, \u003Cstrong>auto\u003C\u002Fstrong>, and \u003Cstrong>lazy\u003C\u002Fstrong>.  Install this plugin and you can set the first image’s loading attribute and the loading attribute for all the subsequent images sent through \u003Ccode>the_content()\u003C\u002Fcode> in the plugin’s settings page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Simple is Beautiful\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>There is no JavaScript or CSS included in the plugin.  It just works in browsers that support the new \u003Ccode>loading\u003C\u002Fcode> image attribute.\u003C\u002Fp>\n\u003Cp>For browsers that don’t support this new image loading attribute, that’s ok.  You can still use whatever JavaScript-based image lazy loader you want as a fallback until browser support becomes a little more mainstream.\u003C\u002Fp>\n","Automatically add the new loading attribute to images within your content to support native image lazy loading.",20,1584,80,1,"2019-05-21T02:28:00.000Z","5.2.24","4.5","5.1",[21,77,22,78,23],"lazy-load","loading","https:\u002F\u002Fgithub.com\u002Fjdmdigital\u002FJDM-Native-Lazy-Loading","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnative-image-lazy-loading.zip",{"slug":82,"name":83,"version":84,"author":85,"author_profile":86,"description":87,"short_description":88,"active_installs":27,"downloaded":89,"rating":27,"num_ratings":27,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":93,"tags":94,"homepage":97,"download_link":98,"security_score":11,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":99},"lehmannlabs-webp-optimizer","LehmannLabs WebP Optimizer","1.0.0","lehmannlabs","https:\u002F\u002Fprofiles.wordpress.org\u002Flehmannlabs\u002F","\u003Cp>LehmannLabs WebP Optimizer is focused on one core goal: faster page load times.\u003C\u002Fp>\n\u003Cp>The plugin converts your WordPress images to WebP and serves WebP files on the frontend whenever available. This reduces image payload and helps improve Core Web Vitals and user experience.\u003C\u002Fp>\n\u003Cp>It was developed for WordPress websites built with Elementor and works well with typical Elementor image output (including image widgets, carousels, and background image use cases).\u003C\u002Fp>\n\u003Cp>Unlike many plugins in this category, LehmannLabs WebP Optimizer is fully free to use, with no advertising, no tracking, and no premium upsells.\u003C\u002Fp>\n\u003Cp>Tested with:\u003Cbr \u002F>\n– Elementor v3.35.6\u003Cbr \u002F>\n– Elementor Pro v3.35.1\u003C\u002Fp>\n\u003Cp>Key benefits:\u003Cbr \u002F>\n– Faster frontend image delivery through WebP replacement\u003Cbr \u002F>\n– Completely free, with no ads and no paid upgrades\u003Cbr \u002F>\n– Optional auto-conversion on upload\u003Cbr \u002F>\n– Batch conversion for existing media\u003Cbr \u002F>\n– Safe fallback strategy and backup\u002Frestore tools\u003Cbr \u002F>\n– No external API calls, no tracking\u003C\u002Fp>\n\u003Cp>Main features:\u003Cbr \u002F>\n– WebP generation for full-size and intermediate image sizes\u003Cbr \u002F>\n– Output modes:\u003Cbr \u002F>\n  – Picture mode (recommended): WebP source with fallback image\u003Cbr \u002F>\n  – Direct mode: direct URL\u002Fsrcset replacement to WebP when available\u003Cbr \u002F>\n– Original image backup to \u003Ccode>uploads\u002Fslimage-backup\u002FYYYY\u002FMM\u002F\u003C\u002Fcode>\u003Cbr \u002F>\n– Optional resize with configurable maximum edge length\u003Cbr \u002F>\n– Batch tools in wp-admin:\u003Cbr \u002F>\n  – Scan & Optimize\u003Cbr \u002F>\n  – Delete WebP Files\u003Cbr \u002F>\n  – Restore Originals\u003Cbr \u002F>\n– Site Health integration for WebP capability checks\u003C\u002Fp>\n","Improve page speed in WordPress with a free WebP optimizer for Elementor workflows. No ads, no tracking, no paid upsells.",69,"2026-03-19T13:58:00.000Z","6.9.4","6.2","7.4",[20,21,95,23,96],"optimization","webp","https:\u002F\u002Flehmannlabs.dev","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flehmannlabs-webp-optimizer.1.0.0.zip","2026-04-06T09:54:40.288Z",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":108,"downloaded":109,"rating":110,"num_ratings":111,"last_updated":112,"tested_up_to":91,"requires_at_least":113,"requires_php":114,"tags":115,"homepage":119,"download_link":120,"security_score":121,"vuln_count":122,"unpatched_count":27,"last_vuln_date":123,"fetched_at":29},"autoptimize","Autoptimize","3.1.15.1","Optimizing Matters","https:\u002F\u002Fprofiles.wordpress.org\u002Foptimizingmatters\u002F","\u003Cp>Autoptimize makes optimizing your site really easy. It can aggregate, minify and cache scripts and styles, injects CSS in the page head by default but can also inline critical CSS and defer the aggregated full CSS, moves and defers scripts to the footer and minifies HTML. You can optimize and lazy-load images (with support for WebP and AVIF formats), optimize Google Fonts, async non-aggregated JavaScript, remove WordPress core emoji cruft and more. As such it can improve your site’s performance even when already on HTTP\u002F2! There is extensive API available to enable you to tailor Autoptimize to each and every site’s specific needs.\u003Cbr \u002F>\nIf you think performance indeed is important, you should at least consider one of the many free page caching plugins (e.g. \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fspeed-booster-pack\u002F\" rel=\"ugc\">Speed Booster pack\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcache-enabler\" rel=\"ugc\">KeyCDN’s Cache Enabler\u003C\u002Fa>) to complement Autoptimize or even \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=aopro\" rel=\"nofollow ugc\">consider Autoptimize Pro\u003C\u002Fa> which not only has page caching but also image optimization, CDN, critical CSS and more!\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Autoptimize Pro\u003C\u002Fstrong>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=aopro\" rel=\"nofollow ugc\">Autoptimize Pro is a premium Power-Up\u003C\u002Fa>, adding image optimization, CDN, page caching, automatic critical CSS rules and extra “booster” options, all in one handy subscription to \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=aopro\" rel=\"nofollow ugc\">make your site even faster!\u003C\u002Fa>!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Premium Support\u003C\u002Fstrong>\u003Cbr \u002F>\n  We provide great \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=autoptimizepro\" rel=\"nofollow ugc\">Premium Support and Web Performance Optimization services\u003C\u002Fa> with Accelera, check out our offering on \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=autoptimizepro\" rel=\"nofollow ugc\">https:\u002F\u002Faccelerawp.com\u002F\u003C\u002Fa>!\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>(Speed-surfing image under creative commons \u003Ca href=\"https:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Ftwistiti\u002F818552808\u002F\" rel=\"nofollow ugc\">by LL Twistiti\u003C\u002Fa>)\u003C\u002Fp>\n","Autoptimize speeds up your website by optimizing JS, CSS, images (incl. lazy-load), HTML and Google Fonts, asyncing JS, removing emoji cruft and more.",900000,43632206,94,1425,"2026-04-04T07:44:00.000Z","5.3","7.1",[116,21,117,118,23],"core-web-vitals","optimize","pagespeed","https:\u002F\u002Fautoptimize.com\u002Fpro\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fautoptimize.3.1.15.1.zip",77,12,"2026-03-20 00:00:00",{"slug":125,"name":126,"version":127,"author":128,"author_profile":129,"description":130,"short_description":131,"active_installs":132,"downloaded":133,"rating":134,"num_ratings":135,"last_updated":136,"tested_up_to":91,"requires_at_least":137,"requires_php":18,"tags":138,"homepage":139,"download_link":140,"security_score":141,"vuln_count":14,"unpatched_count":27,"last_vuln_date":142,"fetched_at":29},"webp-express","WebP Express","0.25.14","rosell.dk","https:\u002F\u002Fprofiles.wordpress.org\u002Froselldk\u002F","\u003Cp>More than 9 out of 10 users are using a browser that is able to display webp images. Yet, on most websites, they are served jpeg images, which are typically double the size of webp images for a given quality. What a waste of bandwidth! This plugin was created to help remedy that situation. With little effort, WordPress admins can have their site serving autogenerated webp images to browsers that supports it, while still serving jpeg and png files to browsers that does not support webp.\u003C\u002Fp>\n\u003Ch3>The image converter\u003C\u002Fh3>\n\u003Cp>The plugin uses the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fwebp-convert\" rel=\"nofollow ugc\">WebP Convert\u003C\u002Fa> library to convert images to webp. \u003Cem>WebP Convert\u003C\u002Fem> is able to convert images using multiple methods. There are the “local” conversion methods: \u003Ccode>imagick\u003C\u002Fcode>, \u003Ccode>cwebp\u003C\u002Fcode>, \u003Ccode>vips\u003C\u002Fcode>, \u003Ccode>gd\u003C\u002Fcode>. If none of these works on your host, there are the cloud alternatives: \u003Ccode>ewww\u003C\u002Fcode> (paid) or connecting to a WordPress site where you got WebP Express installed and you enabled the “web service” functionality.\u003C\u002Fp>\n\u003Ch3>The “Serving webp to browsers that supports it” part.\u003C\u002Fh3>\n\u003Cp>The plugin supports different ways of delivering webps to browsers that supports it:\u003C\u002Fp>\n\u003Col>\n\u003Cli>By routing jpeg\u002Fpng images to the corresponding webp – or to the image converter if the image hasn’t been converted yet.\u003C\u002Fli>\n\u003Cli>By altering the HTML, replacing image tags with \u003Cem>picture\u003C\u002Fem> tags. Missing webps are auto generated upon visit.\u003C\u002Fli>\n\u003Cli>By altering the HTML, replacing image URLs so all points to webp. The replacements only being made for browsers that supports webp. Again, missing webps are auto generated upon visit.\u003C\u002Fli>\n\u003Cli>In combination with \u003Cem>Cache Enabler\u003C\u002Fem>, the same as above can be achieved, but with page caching.\u003C\u002Fli>\n\u003Cli>You can also deliver webp to \u003Cem>all\u003C\u002Fem> browsers and add the \u003Ca href=\"http:\u002F\u002Fwebpjs.appspot.com\" rel=\"nofollow ugc\">webpjs\u003C\u002Fa> javascript, which provides webp support for browsers that doesn’t support webp natively. However, beware that the javascript doesn’t support srcset attributes, which is why I haven’t added that method to the plugin (yet).\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>The plugin implements the “WebP On Demand” solution described \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fwebp-convert\u002Fblob\u002Fmaster\u002Fdocs\u002Fv2.0\u002Fwebp-on-demand\u002Fwebp-on-demand.md\" rel=\"nofollow ugc\">here\u003C\u002Fa> and builds on a bunch of open source libraries (all maintained by me):\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fwebp-convert\" rel=\"nofollow ugc\">WebP Convert\u003C\u002Fa>: For converting images to webp\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fwebp-convert-cloud-service\" rel=\"nofollow ugc\">WebP Convert Cloud Service\u003C\u002Fa>: For the Web Service functionality\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fdom-util-for-webp\" rel=\"nofollow ugc\">DOM Util for WebP\u003C\u002Fa>: For the Alter HTML functionality\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fimage-mime-type-guesser\" rel=\"nofollow ugc\">Image MimeType Guesser\u003C\u002Fa>: For detecting mime types of images.\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fhtaccess-capability-tester\" rel=\"nofollow ugc\">HTAccess Capability Tester\u003C\u002Fa>: For testing .htaccess capabilities in a given directory, using live tests\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fwebp-convert-filemanager\" rel=\"nofollow ugc\">WebP Convert File Manager\u003C\u002Fa>: For browsing conversions and triggering conversions.\u003Cbr \u002F>\n– \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fexec-with-fallback\" rel=\"nofollow ugc\">Exec With Fallback\u003C\u002Fa>: For emulating exec() on systems where it is disabled (using proc_open(), passthru() or similar alternatives).\u003C\u002Fp>\n\u003Ch3>Benefits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Much faster load time for images in browsers that supports webp. The converted images are typically \u003Cem>less than half the size\u003C\u002Fem> (for jpeg), while maintaining the same quality. Bear in mind that for most web sites, images are responsible for the largest part of the waiting time.\u003C\u002Fli>\n\u003Cli>Better user experience (whether performance goes from terrible to bad, or from good to impressive, it is a benefit).\u003C\u002Fli>\n\u003Cli>Better ranking in Google searches (performance is taken into account by Google).\u003C\u002Fli>\n\u003Cli>Less bandwidth consumption – makes a huge difference in the parts of the world where the internet is slow and costly (you know, ~80% of the world population lives under these circumstances).\u003C\u002Fli>\n\u003Cli>Currently ~97% of all traffic are done with browsers supporting webp.\u003C\u002Fli>\n\u003Cli>It’s great for the environment too! Reducing network traffic reduces electricity consumption which reduces CO2 emissions.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Limitations\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>The plugin \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fwebp-express\u002Fpull\u002F213\" rel=\"nofollow ugc\">should now work on Microsoft IIS server\u003C\u002Fa>, but it has not been tested thoroughly.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Supporting WebP Express\u003C\u002Fh3>\n\u003Cp>Bread on the table don’t come for free, even though this plugin does, and always will. I enjoy developing this, and supporting you guys, but I kind of need the bread too. Please make it possible for me to continue wasting time on this plugin:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fko-fi.com\u002Frosell\" rel=\"nofollow ugc\">Buy me a Coffee\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsponsors\u002Frosell-dk\" rel=\"nofollow ugc\">Buy me coffee on a regular basis\u003C\u002Fa> and help ensuring my coffee supplies doesn’t run dry.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Supporters of WebP Express\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Persons who recently contributed with \u003Ca href=\"https:\u002F\u002Fko-fi.com\u002Frosell\" rel=\"nofollow ugc\">ko-fi\u003C\u002Fa> – Thanks!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>5 Jan: Joel\u003C\u002Fli>\n\u003Cli>24 Dec: Patrick Müller\u003C\u002Fli>\n\u003Cli>16 Dec: Dragos\u003C\u002Fli>\n\u003Cli>9 Aug: Tanzi\u003C\u002Fli>\n\u003Cli>3 Jul: Jen\u003C\u002Fli>\n\u003Cli>26 Jun: Per\u003C\u002Fli>\n\u003Cli>16 May: Erick Danzer\u003C\u002Fli>\n\u003Cli>8 May: Mike\u003C\u002Fli>\n\u003Cli>31 May: parallactic\u003C\u002Fli>\n\u003Cli>14 May: Gitte Rebsdorf\u003C\u002Fli>\n\u003Cli>9 May: La Braud\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Persons who recently contributed on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsponsors\u002Frosell-dk\" rel=\"nofollow ugc\">github sponsors\u003C\u002Fa> – Thanks!\u003C\u002Fstrong>\u003Cbr \u002F>\n* 16 Dec: kcrlost\u003Cbr \u002F>\n* 16 Dec: Yakovos Frountas (Greece)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Persons who contributed with extra generously amounts of coffee \u002F lifetime backing (>80$) – thanks!:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Patrick Müller ($250)\u003C\u002Fli>\n\u003Cli>Max Kreminsky ($115)\u003C\u002Fli>\n\u003Cli>Justin – BigScoots ($105)\u003C\u002Fli>\n\u003Cli>Bill Vallance ($102)\u003C\u002Fli>\n\u003Cli>Joel ($100)\u003C\u002Fli>\n\u003Cli>Label Vier ($100)\u003C\u002Fli>\n\u003Cli>Sebastian ($99)\u003C\u002Fli>\n\u003Cli>Tammy Lee ($90)\u003C\u002Fli>\n\u003C\u002Ful>\n","Serve autogenerated WebP images instead of jpeg\u002Fpng to browsers that supports WebP.",300000,4148957,88,160,"2026-01-14T06:51:00.000Z","4.0",[21,23,96],"https:\u002F\u002Fgithub.com\u002Frosell-dk\u002Fwebp-express","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebp-express.0.25.14.zip",95,"2025-12-03 15:48:18",{"attackSurface":144,"codeSignals":175,"taintFlows":183,"riskAssessment":184,"analyzedAt":190},{"hooks":145,"ajaxHandlers":171,"restRoutes":172,"shortcodes":173,"cronEvents":174,"entryPointCount":27,"unprotectedCount":27},[146,152,156,159,163,167],{"type":147,"name":148,"callback":149,"priority":68,"file":150,"line":151},"action","admin_menu","register_options_page","easy-optimizer.php",67,{"type":147,"name":153,"callback":154,"file":150,"line":155},"admin_init","register_settings",68,{"type":147,"name":157,"callback":158,"file":150,"line":49},"wp_enqueue_scripts","enqueue_frontend_scripts",{"type":147,"name":160,"callback":161,"file":150,"line":162},"admin_enqueue_scripts","enqueue_admin_assets",73,{"type":147,"name":164,"callback":165,"priority":47,"file":150,"line":166},"template_redirect","start_output_buffer",76,{"type":147,"name":168,"callback":169,"file":150,"line":170},"init","load_textdomain",79,[],[],[],[],{"dangerousFunctions":176,"sqlUsage":177,"outputEscaping":179,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":71,"bundledLibraries":182},[],{"prepared":27,"raw":27,"locations":178},[],{"escaped":180,"rawEcho":27,"locations":181},10,[],[],[],{"summary":185,"deductions":186},"The \"easy-optimizer\" v1.1.0 plugin exhibits a strong security posture based on the provided static analysis.  The absence of any identified entry points like AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the potential attack surface.  Furthermore, the code demonstrates good security practices with 100% SQL queries using prepared statements and 100% properly escaped output, indicating a low risk of injection and cross-site scripting vulnerabilities. The presence of a capability check also suggests an attempt to enforce authorization for certain operations.  The lack of any recorded vulnerabilities or CVEs, both historically and in the current version, further reinforces its secure standing.\n\nDespite the strong static analysis results, the total absence of taint analysis flows is a notable point. While this could mean no sensitive data flows were identified, it could also indicate that the taint analysis tool was not effectively configured or that the plugin's functionality is very limited, thus not triggering these analyses.  The reported 0 nonce checks is a concern, especially if the plugin were to introduce AJAX or other interactive elements in the future. Without nonce checks, even with capability checks, there's a potential for CSRF attacks if user-specific actions are performed. However, given the reported 0 entry points, this risk is currently theoretical. The plugin's strengths lie in its clean code regarding SQL and output, and its very limited attack surface. Its primary weakness, based on the data, is the potential for future vulnerabilities if new entry points are added without proper security measures like nonce checks.",[187],{"reason":188,"points":189},"Missing nonce checks for entry points",5,"2026-03-16T21:11:30.402Z",{"wat":192,"direct":205},{"assetPaths":193,"generatorPatterns":198,"scriptPaths":199,"versionParams":200},[194,195,196,197],"\u002Fwp-content\u002Fplugins\u002Feasy-optimizer\u002Fassets\u002Flazyload.min.js","\u002Fwp-content\u002Fplugins\u002Feasy-optimizer\u002Fassets\u002Fpreload.min.js","\u002Fwp-content\u002Fplugins\u002Feasy-optimizer\u002Fassets\u002Fscript.js","\u002Fwp-content\u002Fplugins\u002Feasy-optimizer\u002Fassets\u002Fstyle.css",[],[195,194,196],[201,202,203,204],"easy-optimizer\u002Fassets\u002Fpreload.min.js?ver=","easy-optimizer\u002Fassets\u002Flazyload.min.js?ver=","easy-optimizer\u002Fassets\u002Fscript.js?ver=","easy-optimizer\u002Fassets\u002Fstyle.css?ver=",{"cssClasses":206,"htmlComments":207,"htmlAttributes":208,"restEndpoints":209,"jsGlobals":210,"shortcodeOutput":215},[],[],[],[],[211,212,213,214],"easyopt-instant-preload","easyopt-lazysizes","easyopt-admin","instantPreloption",[],{"error":217,"url":218,"statusCode":219,"statusMessage":220,"message":220},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Feasy-optimizer\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":222,"versions":223},11,[224,230,237,244,251,258,265,272,279,286,293],{"version":6,"download_url":26,"svn_tag_url":225,"released_at":28,"has_diff":226,"diff_files_changed":227,"diff_lines":28,"trac_diff_url":228,"vulnerabilities":229,"is_current":217},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.1.0\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Feasy-optimizer%2Ftags%2F1.0.9&new_path=%2Feasy-optimizer%2Ftags%2F1.1.0",[],{"version":231,"download_url":232,"svn_tag_url":233,"released_at":28,"has_diff":226,"diff_files_changed":234,"diff_lines":28,"trac_diff_url":235,"vulnerabilities":236,"is_current":226},"1.0.9","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.0.9.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.0.9\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Feasy-optimizer%2Ftags%2F1.0.8&new_path=%2Feasy-optimizer%2Ftags%2F1.0.9",[],{"version":238,"download_url":239,"svn_tag_url":240,"released_at":28,"has_diff":226,"diff_files_changed":241,"diff_lines":28,"trac_diff_url":242,"vulnerabilities":243,"is_current":226},"1.0.8","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.0.8.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.0.8\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Feasy-optimizer%2Ftags%2F1.0.7&new_path=%2Feasy-optimizer%2Ftags%2F1.0.8",[],{"version":245,"download_url":246,"svn_tag_url":247,"released_at":28,"has_diff":226,"diff_files_changed":248,"diff_lines":28,"trac_diff_url":249,"vulnerabilities":250,"is_current":226},"1.0.7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.0.7.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.0.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Feasy-optimizer%2Ftags%2F1.0.6&new_path=%2Feasy-optimizer%2Ftags%2F1.0.7",[],{"version":252,"download_url":253,"svn_tag_url":254,"released_at":28,"has_diff":226,"diff_files_changed":255,"diff_lines":28,"trac_diff_url":256,"vulnerabilities":257,"is_current":226},"1.0.6","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.0.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.0.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Feasy-optimizer%2Ftags%2F1.0.5&new_path=%2Feasy-optimizer%2Ftags%2F1.0.6",[],{"version":259,"download_url":260,"svn_tag_url":261,"released_at":28,"has_diff":226,"diff_files_changed":262,"diff_lines":28,"trac_diff_url":263,"vulnerabilities":264,"is_current":226},"1.0.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.0.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.0.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Feasy-optimizer%2Ftags%2F1.0.4&new_path=%2Feasy-optimizer%2Ftags%2F1.0.5",[],{"version":266,"download_url":267,"svn_tag_url":268,"released_at":28,"has_diff":226,"diff_files_changed":269,"diff_lines":28,"trac_diff_url":270,"vulnerabilities":271,"is_current":226},"1.0.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.0.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.0.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Feasy-optimizer%2Ftags%2F1.0.3&new_path=%2Feasy-optimizer%2Ftags%2F1.0.4",[],{"version":273,"download_url":274,"svn_tag_url":275,"released_at":28,"has_diff":226,"diff_files_changed":276,"diff_lines":28,"trac_diff_url":277,"vulnerabilities":278,"is_current":226},"1.0.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.0.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.0.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Feasy-optimizer%2Ftags%2F1.0.2&new_path=%2Feasy-optimizer%2Ftags%2F1.0.3",[],{"version":280,"download_url":281,"svn_tag_url":282,"released_at":28,"has_diff":226,"diff_files_changed":283,"diff_lines":28,"trac_diff_url":284,"vulnerabilities":285,"is_current":226},"1.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.0.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Feasy-optimizer%2Ftags%2F1.0.1&new_path=%2Feasy-optimizer%2Ftags%2F1.0.2",[],{"version":287,"download_url":288,"svn_tag_url":289,"released_at":28,"has_diff":226,"diff_files_changed":290,"diff_lines":28,"trac_diff_url":291,"vulnerabilities":292,"is_current":226},"1.0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.0.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Feasy-optimizer%2Ftags%2F1.0.0&new_path=%2Feasy-optimizer%2Ftags%2F1.0.1",[],{"version":84,"download_url":294,"svn_tag_url":295,"released_at":28,"has_diff":226,"diff_files_changed":296,"diff_lines":28,"trac_diff_url":28,"vulnerabilities":297,"is_current":226},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-optimizer.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Feasy-optimizer\u002Ftags\u002F1.0.0\u002F",[],[]]