ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More Security & Risk Analysis
wordpress.org/plugins/image-sizesThe all-in-one WordPress image optimization plugin. Disable thumbnails, compress images, convert to WebP & AVIF, clean your media library, and more.
Is ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More Safe to Use in 2026?
Generally Safe
Score 99/100ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.
The 'image-sizes' plugin v5.8.37 demonstrates a generally strong security posture with good practices in place. The plugin effectively utilizes prepared statements for most SQL queries and shows a high percentage of properly escaped output, minimizing common vulnerabilities. The absence of known CVEs, critical taint flows, and dangerous functions further contributes to its good security standing.
However, a significant concern arises from the presence of one unprotected AJAX handler. This creates an easily exploitable entry point for attackers, as it lacks authentication or authorization checks. While the plugin has a low attack surface overall, this single unprotected handler presents a critical risk.
In conclusion, 'image-sizes' v5.8.37 is largely well-secured, with excellent adherence to best practices for SQL and output handling. The plugin's history of zero vulnerabilities is a positive indicator. The primary weakness lies in the single unprotected AJAX endpoint, which, despite the overall good security, represents a notable security gap that should be addressed.
Key Concerns
- Unprotected AJAX handler found
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More Security Vulnerabilities
CVEs by Year
Severity Breakdown
1 total CVE
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More <= 6.3.2 - Missing Authorization
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More Release Timeline
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More Code Analysis
SQL Query Safety
Output Escaping
Data Flow Analysis
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More Attack Surface
AJAX Handlers 1
WordPress Hooks 2
Scheduled Events 1
Maintenance & Trust
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More Maintenance & Trust
Maintenance Signals
Community Trust
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More Alternatives
Squeeze – Image Optimization & Compression, WEBP Conversion
squeeze
Compress images in WordPress & convert to WebP — no API key, no quotas, no cloud. Unlimited local image optimizer; private browser-side compression.
Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF
imagify
Image optimization in 1‑click: compress, resize & convert to WebP/AVIF – free up to 20MB/month. Enjoy the easiest WordPress image optimizer to set up.
Smush – Image Optimization, Compression, Lazy Load, WebP & CDN
wp-smushit
Compress and optimize images, enable lazy load, serve WebP & AVIF, and speed up your site with a global image CDN.
Converter for Media – Optimize images | Convert WebP & AVIF
webp-converter-for-media
Speed up your website by using our WebP & AVIF Converter. Optimize images and serve WebP and AVIF images instead of standard formats!
ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF
shortpixel-image-optimiser
Optimize images & PDFs smartly. Create and compress next-gen WebP and AVIF formats. Smart crop and resize.
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More Developer Profile
10 plugins · 40K total installs
How We Detect ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/image-sizes/assets/css/main.css/wp-content/plugins/image-sizes/assets/css/tooltip.css/wp-content/plugins/image-sizes/assets/css/responsive.css/wp-content/plugins/image-sizes/assets/js/main.js/wp-content/plugins/image-sizes/assets/js/tooltip.js/wp-content/plugins/image-sizes/assets/js/responsive.jsimage-sizes/assets/css/main.css?ver=image-sizes/assets/css/tooltip.css?ver=image-sizes/assets/css/responsive.css?ver=image-sizes/assets/js/main.js?ver=image-sizes/assets/js/tooltip.js?ver=image-sizes/assets/js/responsive.js?ver=HTML / DOM Fingerprints
cx-thumbpress-settingscx-thumbpress-welcomecx-thumbpress-upgradecx-thumbpress-upgrade-modalcx-thumbpress-upgrade-noticecx-thumbpress-tooltipcx-thumbpress-responsive<!-- ThumbPress Welcome Modal --><!-- ThumbPress Upgrade Modal --><!-- ThumbPress Upgrade Notice --><!-- ThumbPress Tooltip -->+1 moredata-cx-tooltipdata-cx-responsive-breakpointwindow.cx_responsive_settings