[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqM3ayszSDkYOnm3BByqEUl4lIQZwi4riKVio3v8hvkY":3,"$fyH2ILK2w0JzYTNVOR3DVV7g45cyi3NPfdHb-i18VxXo":238,"$fAA7rL0skvtACQcDGqvA6kBlYkJCu7Ax1vn1093ulRCc":243},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":35,"analysis":111,"fingerprints":222},"lehmannlabs-webp-optimizer","LehmannLabs WebP Optimizer","1.0.0","lehmannlabs","https:\u002F\u002Fprofiles.wordpress.org\u002Flehmannlabs\u002F","\u003Cp>LehmannLabs WebP Optimizer is focused on one core goal: faster page load times.\u003C\u002Fp>\n\u003Cp>The plugin converts your WordPress images to WebP and serves WebP files on the frontend whenever available. This reduces image payload and helps improve Core Web Vitals and user experience.\u003C\u002Fp>\n\u003Cp>It was developed for WordPress websites built with Elementor and works well with typical Elementor image output (including image widgets, carousels, and background image use cases).\u003C\u002Fp>\n\u003Cp>Unlike many plugins in this category, LehmannLabs WebP Optimizer is fully free to use, with no advertising, no tracking, and no premium upsells.\u003C\u002Fp>\n\u003Cp>Tested with:\u003Cbr \u002F>\n– Elementor v3.35.6\u003Cbr \u002F>\n– Elementor Pro v3.35.1\u003C\u002Fp>\n\u003Cp>Key benefits:\u003Cbr \u002F>\n– Faster frontend image delivery through WebP replacement\u003Cbr \u002F>\n– Completely free, with no ads and no paid upgrades\u003Cbr \u002F>\n– Optional auto-conversion on upload\u003Cbr \u002F>\n– Batch conversion for existing media\u003Cbr \u002F>\n– Safe fallback strategy and backup\u002Frestore tools\u003Cbr \u002F>\n– No external API calls, no tracking\u003C\u002Fp>\n\u003Cp>Main features:\u003Cbr \u002F>\n– WebP generation for full-size and intermediate image sizes\u003Cbr \u002F>\n– Output modes:\u003Cbr \u002F>\n  – Picture mode (recommended): WebP source with fallback image\u003Cbr \u002F>\n  – Direct mode: direct URL\u002Fsrcset replacement to WebP when available\u003Cbr \u002F>\n– Original image backup to \u003Ccode>uploads\u002Fslimage-backup\u002FYYYY\u002FMM\u002F\u003C\u002Fcode>\u003Cbr \u002F>\n– Optional resize with configurable maximum edge length\u003Cbr \u002F>\n– Batch tools in wp-admin:\u003Cbr \u002F>\n  – Scan & Optimize\u003Cbr \u002F>\n  – Delete WebP Files\u003Cbr \u002F>\n  – Restore Originals\u003Cbr \u002F>\n– Site Health integration for WebP capability checks\u003C\u002Fp>\n","Improve page speed in WordPress with a free WebP optimizer for Elementor workflows. No ads, no tracking, no paid upsells.",0,69,"2026-03-19T13:58:00.000Z","6.9.4","6.2","7.4",[18,19,20,21,22],"elementor","images","optimization","performance","webp","https:\u002F\u002Flehmannlabs.dev","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flehmannlabs-webp-optimizer.1.0.0.zip",100,null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,94,"2026-05-19T20:15:52.997Z",[36,53,69,85,97],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":25,"downloaded":44,"rating":11,"num_ratings":11,"last_updated":45,"tested_up_to":14,"requires_at_least":46,"requires_php":47,"tags":48,"homepage":50,"download_link":51,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":52},"auto-webp-converter-logger","Auto WebP Converter & Logger","2.0","BabaPinnak","https:\u002F\u002Fprofiles.wordpress.org\u002Fbabapinnak\u002F","\u003Cp>\u003Cstrong>Auto WebP Converter & Logger\u003C\u002Fstrong> is the smartest, safest way to serve next-gen images on WordPress.\u003C\u002Fp>\n\u003Cp>Most optimization plugins slow down your site with external API calls or crash your server by processing huge files. \u003Cstrong>Auto WebP Converter is different.\u003C\u002Fstrong> It runs entirely on your server using the native PHP GD library, featuring a unique \u003Cstrong>Smart Memory Guard\u003C\u002Fstrong> that calculates available RAM before processing to prevent crashes.\u003C\u002Fp>\n\u003Ch3>🚀 Why Auto WebP Converter?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Boost Core Web Vitals:\u003C\u002Fstrong> Serving WebP images significantly reduces page load size.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Zero API Fees:\u003C\u002Fstrong> No subscriptions, no credits, no data sharing. It’s 100% free.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Server Safety First:\u003C\u002Fstrong> Detects low memory and conflicting plugins (like Smush\u002FEWWW) to prevent errors.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Set & Forget:\u003C\u002Fstrong> Auto-converts JPGs and PNGs immediately upon upload.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>⚡ Feature Highlights\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Smart Conversion:\u003C\u002Fstrong> Converts the main image AND all thumbnails (Media Library, WooCommerce, etc.).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Self-Cleaning Logs:\u003C\u002Fstrong> Detailed conversion history with auto-delete (Cron) to keep your database clean.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>MIME Sync:\u003C\u002Fstrong> Automatically updates WordPress metadata so browsers recognize the \u003Ccode>.webp\u003C\u002Fcode> format.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy Focused:\u003C\u002Fstrong> Your images never leave your server.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FCyhMgtOXuio?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n","Boost site speed by automatically converting uploads to WebP. Features smart memory protection, detailed logging, and zero API dependencies.",924,"2025-12-09T06:43:00.000Z","5.2","7.0",[49,19,20,21,22],"compression","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fauto-webp-converter-logger.2.0.zip","2026-04-16T10:56:18.058Z",{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":25,"num_ratings":31,"last_updated":63,"tested_up_to":64,"requires_at_least":65,"requires_php":16,"tags":66,"homepage":50,"download_link":68,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":52},"magic-optimize","Magic optimize","1.0.1","Mikalai Zaitsau","https:\u002F\u002Fprofiles.wordpress.org\u002Fmikalaizaitsau\u002F","\u003Cp>\u003Cstrong>Optimize Images & Speed\u003C\u002Fstrong> enhances your WordPress website’s performance by optimizing images through WebP conversion, seamlessly integrating image replacement in Elementor, and compressing CSS and HTML files to reduce page size and load times.\u003C\u002Fp>\n\u003Ch3>Current Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>WebP Conversion:\u003C\u002Fstrong> Automatically converts images to the optimized WebP format.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Elementor Support:\u003C\u002Fstrong> Seamlessly replaces images in Elementor widgets with optimized WebP versions.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CSS Minification:\u003C\u002Fstrong> Compresses CSS files for faster page load.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>HTML Minification:\u003C\u002Fstrong> Optimizes HTML code by removing unnecessary whitespace and comments.\u003C\u002Fli>\n\u003C\u002Ful>\n","Optimize images to WebP and minify CSS\u002FHTML. Elementor-compatible performance plugin.",20,442,"2025-06-27T12:47:00.000Z","6.8.5","5.6",[18,67,20,21,22],"minify","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmagic-optimize.1.0.1.zip",{"slug":70,"name":71,"version":72,"author":73,"author_profile":74,"description":75,"short_description":76,"active_installs":77,"downloaded":78,"rating":25,"num_ratings":31,"last_updated":79,"tested_up_to":14,"requires_at_least":80,"requires_php":16,"tags":81,"homepage":83,"download_link":84,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":52},"stintlief-webp-converter","Stintlief WebP Converter","1.1.0","Stintlief Technologies","https:\u002F\u002Fprofiles.wordpress.org\u002Fstintlief\u002F","\u003Cp>Stintlief WebP Converter automatically converts uploaded JPEG, PNG, and GIF images to the modern WebP format, providing significant file size reductions while maintaining visual quality. The plugin includes smart features to ensure safety and reversibility.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Automatic Conversion\u003C\u002Fstrong>: Converts images to WebP on upload without manual intervention\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Smart Size Comparison\u003C\u002Fstrong>: Only keeps WebP if it’s smaller than the original (configurable)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Safe Backups\u003C\u002Fstrong>: Optional automatic backup of original files for easy restoration\u003C\u002Fli>\n\u003Cli>\u003Cstrong>One-Click Restore\u003C\u002Fstrong>: Restore original images from attachment edit screen\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Animated GIF Protection\u003C\u002Fstrong>: Automatically skips animated GIFs to preserve animation\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Configurable Settings\u003C\u002Fstrong>: Control max dimensions, compression quality, and behavior\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No External Services\u003C\u002Fstrong>: All processing happens on your server – no data sent elsewhere\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Boost\u003C\u002Fstrong>: WebP images are typically 25-35% smaller than JPEG\u002FPNG\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Privacy & Data Handling\u003C\u002Fh4>\n\u003Cp>This plugin does not:\u003Cbr \u002F>\n* Send any data to external servers\u003Cbr \u002F>\n* Store personal user information\u003Cbr \u002F>\n* Track users or create logs (except standard WordPress debug logs when WP_DEBUG is enabled)\u003Cbr \u002F>\n* Use cookies or external APIs\u003C\u002Fp>\n\u003Cp>Backup files (if enabled) are stored locally on your server in the uploads directory and are not publicly exposed unless explicitly accessed.\u003C\u002Fp>\n\u003Ch4>Supported Image Formats\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>JPEG (.jpg, .jpeg)\u003C\u002Fli>\n\u003Cli>PNG (.png)\u003C\u002Fli>\n\u003Cli>GIF (.gif) – static only, animated GIFs are preserved\u003C\u002Fli>\n\u003Cli>HEIC\u002FHEIF (if server supports)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cp>Your server must have one of the following:\u003Cbr \u002F>\n* Imagick extension with WebP support\u003Cbr \u002F>\n* GD extension with WebP support\u003C\u002Fp>\n\u003Cp>The plugin will display a notice if WebP support is not available.\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>This plugin does not collect, store, or transmit any personal data. All image processing happens locally on your WordPress server. Backup files (if enabled) are stored in your uploads directory and are not shared or transmitted to external services.\u003C\u002Fp>\n\u003Cp>If you have privacy requirements, you can disable the backup feature in Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Media.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Developed by Stintlief Technologies with a focus on performance, safety, and WordPress best practices.\u003C\u002Fp>\n","Automatically convert uploaded images to optimized WebP format with safe fallbacks, optional backups, and easy restoration.",10,175,"2026-01-13T09:43:00.000Z","5.8",[82,19,20,21,22],"converter","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fstintlief-webp-converter\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstintlief-webp-converter.1.1.0.zip",{"slug":86,"name":87,"version":56,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":11,"downloaded":92,"rating":11,"num_ratings":11,"last_updated":93,"tested_up_to":14,"requires_at_least":94,"requires_php":16,"tags":95,"homepage":50,"download_link":96,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"codepros-image-optimizer","CodePros Image Optimizer","codeprosai","https:\u002F\u002Fprofiles.wordpress.org\u002Fcodeprosai\u002F","\u003Ch4>Large images slowing down your WordPress site?\u003C\u002Fh4>\n\u003Cp>Unoptimized images are one of the biggest reasons WordPress websites become slow.\u003C\u002Fp>\n\u003Cp>Large image files increase page size, delay page loading, and negatively impact Core Web Vitals and SEO rankings. Manually optimizing images can be time consuming and easy to forget.\u003C\u002Fp>\n\u003Cp>CodePros Image Optimizer solves this automatically.\u003C\u002Fp>\n\u003Cp>The plugin converts images to modern WebP format during upload, significantly reducing file size while maintaining visual quality.\u003C\u002Fp>\n\u003Cp>Your site loads faster, visitors get a smoother experience, and search engines reward your website with better rankings.\u003C\u002Fp>\n\u003Ch4>Key Features (Free)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Automatic WebP Conversion – Convert uploaded images to WebP format automatically\u003C\u002Fli>\n\u003Cli>Auto Optimize on Upload – Images are optimized immediately when uploaded\u003C\u002Fli>\n\u003Cli>Quality Control – Adjustable image quality from 0 to 100\u003C\u002Fli>\n\u003Cli>Frontend WebP Serving – Serve WebP images automatically to supported browsers\u003C\u002Fli>\n\u003Cli>Image Filtering – Filter images by type, date, and conversion status\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Pro Features\u003C\u002Fh4>\n\u003Cp>Upgrade to the \u003Ca href=\"https:\u002F\u002Fwp-plugins.codepros.ai\u002Fcodepros-image-optimizer.html\" rel=\"nofollow ugc\">Pro version\u003C\u002Fa>  to unlock advanced optimization tools.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Bulk Optimize Existing Images – Convert previously uploaded images to WebP\u003C\u002Fli>\n\u003Cli>Scheduled Optimization – Run conversions during low traffic hours\u003C\u002Fli>\n\u003Cli>S3 Compatible Storage Support – Sync images to S3 compatible storage and serve via CDN\u003C\u002Fli>\n\u003Cli>CDN Ready Delivery – Serve optimized images globally via CDN\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Learn more about the Pro version:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwp-plugins.codepros.ai\u002Fcodepros-image-optimizer.html\" rel=\"nofollow ugc\">https:\u002F\u002Fwp-plugins.codepros.ai\u002Fcodepros-image-optimizer.html\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>These features are designed for websites with large media libraries and high traffic environments.\u003C\u002Fp>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Cp>The plugin uses the Imagick PHP extension to convert images to WebP format. It processes images in batches to avoid server overload and provides real-time progress updates. WebP images are created alongside your original images, ensuring compatibility with all browsers.\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress 6.6 or higher\u003C\u002Fli>\n\u003Cli>PHP 7.4 or higher\u003C\u002Fli>\n\u003Cli>Imagick PHP extension\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Upload the plugin files to the \u003Ccode>\u002Fwp-content\u002Fplugins\u002Fcodepros-image-optimizer\u003C\u002Fcode> directory, or install the plugin through the WordPress plugins screen directly\u003C\u002Fli>\n\u003Cli>Activate the plugin through the ‘Plugins’ screen in WordPress\u003C\u002Fli>\n\u003Cli>Navigate to Settings > WebP Conversion to configure the plugin\u003C\u002Fli>\n\u003Cli>Enable WebP optimization and configure your preferred settings\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Frequently Asked Questions\u003C\u002Fh4>\n\u003Ch4>Does this plugin delete my original images?\u003C\u002Fh4>\n\u003Cp>No, the plugin creates WebP versions alongside your original images. Your original images remain untouched.\u003C\u002Fp>\n\u003Ch4>What image formats are supported?\u003C\u002Fh4>\n\u003Cp>The plugin supports JPEG, PNG, and other common image formats that can be converted to WebP.\u003C\u002Fp>\n\u003Ch4>Will this work with all hosting providers?\u003C\u002Fh4>\n\u003Cp>The plugin requires the Imagick PHP extension. Most modern hosting providers support this, but you should check with your hosting provider if you encounter issues.\u003C\u002Fp>\n\u003Ch4>Screenshots\u003C\u002Fh4>\n\u003Col>\n\u003Cli>General Settings – Configure Image Optimization options and quality settings\u003C\u002Fli>\n\u003Cli>Bulk Optimization – Process all images in your media library with progress tracking\u003C\u002Fli>\n\u003Cli>Scheduled Conversion – Set up scheduled bulk conversion tasks\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Development\u003C\u002Fh3>\n\u003Cp>= Code Structure =\u003C\u002Fp>\n\u003Cp>The plugin follows WordPress coding standards and uses:\u003Cbr \u002F>\n* PSR-4 autoloading\u003Cbr \u002F>\n* Namespace-based organization\u003Cbr \u002F>\n* Trait-based code reuse\u003Cbr \u002F>\n* Singleton pattern for controllers\u003C\u002Fp>\n\u003Ch4>Hooks and Filters\u003C\u002Fh4>\n\u003Cp>The plugin provides various hooks and filters for developers to extend functionality. Refer to the code documentation for available hooks.\u003C\u002Fp>\n\u003Ch4>Contributing\u003C\u002Fh4>\n\u003Cp>Contributions are welcome! Please ensure all code follows WordPress coding standards and includes proper documentation.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>Developed by Code Pros (https:\u002F\u002Fwww.codepros.ai)\u003C\u002Fp>\n","Convert and optimize your WordPress images to WebP format for faster page loads and better performance.",242,"2026-03-20T09:03:00.000Z","6.6",[19,20,21,22],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcodepros-image-optimizer.1.0.1.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":11,"downloaded":105,"rating":11,"num_ratings":11,"last_updated":106,"tested_up_to":64,"requires_at_least":80,"requires_php":16,"tags":107,"homepage":109,"download_link":110,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"rs-auto-webp-convert","RS Auto WebP Convert","1.0.2","rodrigosilvano","https:\u002F\u002Fprofiles.wordpress.org\u002Frodrigosilvano\u002F","\u003Cp>This plugin converts JPEG\u002FJPG\u002FPNG to WebP at upload time—before WordPress generates sub-sizes. Supports Imagick (preferred) and GD (fallback). Options for quality, PNG lossless, and delete original.\u003C\u002Fp>\n","Automatically converts JPEG\u002FJPG\u002FPNG to WebP on upload, with an option to delete the original. Imagick preferred, GD fallback. No tracking.",176,"2025-10-07T12:13:00.000Z",[108,19,20,21,22],"conversion","https:\u002F\u002Frodrigosilvano.pt\u002Fplugins\u002Frs-auto-webp-convert","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frs-auto-webp-convert.1.0.2.zip",{"attackSurface":112,"codeSignals":202,"taintFlows":213,"riskAssessment":214,"analyzedAt":221},{"hooks":113,"ajaxHandlers":173,"restRoutes":198,"shortcodes":199,"cronEvents":200,"entryPointCount":201,"unprotectedCount":201},[114,119,123,127,131,136,140,144,148,152,156,161,164,167,170],{"type":115,"name":116,"callback":117,"file":118,"line":61},"action","admin_menu","register_menus","includes\u002Fclass-slimage-admin.php",{"type":115,"name":120,"callback":121,"file":118,"line":122},"admin_init","register_settings",21,{"type":115,"name":124,"callback":125,"file":118,"line":126},"admin_enqueue_scripts","enqueue_assets",22,{"type":115,"name":128,"callback":129,"file":118,"line":130},"admin_notices","render_webp_support_notice",23,{"type":132,"name":133,"callback":134,"priority":77,"file":118,"line":135},"filter","media_row_actions","add_media_restore_action",32,{"type":132,"name":137,"callback":138,"file":118,"line":139},"site_status_tests","register_site_health_tests",33,{"type":115,"name":141,"callback":142,"file":118,"line":143},"admin_post_slimage_restore_single","handle_single_restore",34,{"type":115,"name":145,"callback":146,"file":118,"line":147},"admin_post_slimage_delete_backup","handle_delete_backup",35,{"type":115,"name":149,"callback":150,"file":151,"line":135},"plugins_loaded","bootstrap","includes\u002Fclass-slimage-optimizer.php",{"type":132,"name":153,"callback":154,"priority":61,"file":151,"line":155},"wp_generate_attachment_metadata","handle_upload_metadata",46,{"type":132,"name":157,"callback":158,"priority":61,"file":159,"line":160},"wp_get_attachment_image","filter_attachment_image_html","includes\u002Fclass-slimage-output.php",19,{"type":132,"name":162,"callback":163,"priority":61,"file":159,"line":61},"wp_get_attachment_url","filter_attachment_url",{"type":132,"name":165,"callback":166,"priority":61,"file":159,"line":122},"wp_get_attachment_image_src","filter_attachment_image_src",{"type":132,"name":168,"callback":169,"priority":61,"file":159,"line":126},"wp_calculate_image_srcset","filter_calculate_srcset",{"type":132,"name":171,"callback":172,"priority":61,"file":159,"line":130},"the_content","filter_the_content",[174,179,183,187,191,195],{"action":175,"nopriv":176,"callback":177,"hasNonce":176,"hasCapCheck":176,"file":118,"line":178},"slimage_optimize_batch",false,"ajax_optimize_batch",25,{"action":180,"nopriv":176,"callback":181,"hasNonce":176,"hasCapCheck":176,"file":118,"line":182},"slimage_restore_batch","ajax_restore_batch",26,{"action":184,"nopriv":176,"callback":185,"hasNonce":176,"hasCapCheck":176,"file":118,"line":186},"slimage_delete_webp_batch","ajax_delete_webp_batch",27,{"action":188,"nopriv":176,"callback":189,"hasNonce":176,"hasCapCheck":176,"file":118,"line":190},"slimage_repair_paths_batch","ajax_repair_paths_batch",28,{"action":192,"nopriv":176,"callback":193,"hasNonce":176,"hasCapCheck":176,"file":118,"line":194},"slimage_repair_metadata_batch","ajax_repair_metadata_batch",29,{"action":196,"nopriv":176,"callback":197,"hasNonce":176,"hasCapCheck":176,"file":118,"line":32},"slimage_conversion_status","ajax_conversion_status",[],[],[],6,{"dangerousFunctions":203,"sqlUsage":204,"outputEscaping":207,"fileOperations":210,"externalRequests":11,"nonceChecks":211,"capabilityChecks":210,"bundledLibraries":212},[],{"prepared":205,"raw":11,"locations":206},8,[],{"escaped":208,"rawEcho":11,"locations":209},135,[],7,3,[],[],{"summary":215,"deductions":216},"The lehmannlabs-webp-optimizer plugin v1.0.0 exhibits a mixed security posture. On the positive side, the plugin demonstrates strong adherence to secure coding practices concerning SQL queries, which are exclusively executed using prepared statements, and all output is properly escaped. There are no recorded historical vulnerabilities, suggesting a generally well-maintained codebase. However, a significant concern arises from the extensive attack surface exposed by AJAX handlers. All six identified AJAX handlers lack authentication checks, presenting a substantial risk. While taint analysis revealed no issues, indicating no evident flows with unsanitized paths or critical\u002Fhigh severity issues, the absence of authorization on these entry points could still lead to unauthorized actions if the functions they trigger are sensitive or can be manipulated.\n\nThe plugin's lack of historical vulnerabilities is a positive indicator. However, this does not negate the risks introduced by the unprotected AJAX endpoints. The presence of nonce checks and capability checks on some functions is encouraging, but their absence on the AJAX handlers is a critical oversight. The plugin's strengths lie in its secure handling of database interactions and output rendering. The primary weakness is the direct exposure of functionality via AJAX without proper authorization mechanisms, which could be exploited by unauthenticated users to trigger unintended actions within the plugin.",[217,219],{"reason":218,"points":61},"6 AJAX handlers without auth checks",{"reason":220,"points":205},"Large attack surface without auth","2026-04-16T12:59:48.220Z",{"wat":223,"direct":230},{"assetPaths":224,"generatorPatterns":226,"scriptPaths":227,"versionParams":228},[225],"\u002Fwp-content\u002Fplugins\u002Flehmannlabs-webp-optimizer\u002Fassets\u002Fjs\u002Fadmin-tools.js",[],[225],[229],"lehmannlabs-webp-optimizer\u002Fassets\u002Fjs\u002Fadmin-tools.js?ver=",{"cssClasses":231,"htmlComments":232,"htmlAttributes":233,"restEndpoints":234,"jsGlobals":235,"shortcodeOutput":237},[],[],[],[],[236],"SLIMAGE_TOOLS",[],{"error":239,"url":240,"statusCode":241,"statusMessage":242,"message":242},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Flehmannlabs-webp-optimizer\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":31,"versions":244},[245],{"version":6,"download_url":24,"svn_tag_url":246,"released_at":26,"has_diff":176,"diff_files_changed":247,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":248,"is_current":239},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Flehmannlabs-webp-optimizer\u002Ftags\u002F1.0.0\u002F",[],[]]