WP-Safety

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Security & Risk Analysis

wordpress.org/plugins/live-auto-refresh

Instantly reloads the browser when theme or plugin files are edited, or when content is saved.

100 active installs v4.2 PHP 7.0+ WP 4.7+ Updated Jun 10, 2026
auto-refreshhot-reloadlive-reloadrefreshreload
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Safe to Use in 2026?

Generally Safe

Score 100/100

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The plugin "live-auto-refresh" v3.2.1 exhibits a generally good security posture based on the provided static analysis. The absence of known CVEs, dangerous functions, raw SQL queries, file operations, and external HTTP requests is a strong indicator of responsible development. The presence of nonce and capability checks, along with a high percentage of properly escaped output, further strengthens this assessment. However, it's important to note that the static analysis identified two AJAX handlers, and while it states zero are unprotected, the existence of these entry points always carries a theoretical risk that warrants careful monitoring. The lack of any recorded vulnerabilities in its history is a positive sign but doesn't entirely eliminate the possibility of undiscovered issues.

Vulnerabilities
None known

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Release Timeline

v4.2Current
v3.2.1
v3.2
v3.1
v3.0
v2.2
v2.1
v2.0
v1.1
v1.0
Code Analysis
Analyzed Mar 16, 2026

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
14 escaped
Nonce Checks
3
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

88% escaped16 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

3 flows
perron_auto_refresh_toolbar_link (live-auto-refresh.php:146)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_auto_refreshlive-auto-refresh.php:92
noprivwp_ajax_auto_refreshlive-auto-refresh.php:93
WordPress Hooks 10
actionwp_enqueue_scriptslive-auto-refresh.php:22
actionwp_enqueue_scriptslive-auto-refresh.php:109
actionsave_postlive-auto-refresh.php:114
actionacf/save_postlive-auto-refresh.php:116
actionelementor/document/save_datalive-auto-refresh.php:121
actionfl_builder_before_save_layoutlive-auto-refresh.php:128
actionbricks/builder/save_datalive-auto-refresh.php:135
actionadmin_bar_menulive-auto-refresh.php:173
actionwp_headlive-auto-refresh.php:178
actionadmin_menulive-auto-refresh.php:197
Maintenance & Trust

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJun 10, 2026
PHP min version7.0
Downloads7K

Community Trust

Rating86/100
Number of ratings6
Active installs100
Alternatives

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Alternatives

Force Refresh

Force Refresh

force-refresh

A
100

Force Refresh lets you request page refreshes for visitors viewing your site, whether you want to refresh the whole site or a single page.

4K No CVEs
Easy Auto Reload – Auto Refresh

Easy Auto Reload – Auto Refresh

easy-auto-reload

A
100

Auto-refresh your WordPress pages on user inactivity. Keep sessions alive, nonces fresh, and engagement high with this lightweight plugin.

1K No CVEs
Reloadify Frontend Sync

Reloadify Frontend Sync

reloadify-frontend-sync

A
100

Auto-reloads the frontend in all open browsers whenever WordPress content is updated—works with any theme, plugin, or page builder.

0 No CVEs
Image Refresh

Image Refresh

mpress-image-refresh

A
92

Show a fresh image on every page load.

900 No CVEs
WP Auto Reload Widgets

WP Auto Reload Widgets

wp-auto-reload-widgets

A
85

Wp Auto Reload Widgets plugin allow you to refresh all of widgets in period of time. Set time in seconds and automatically refresh.

90 No CVEs
Developer Profile

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Developer Profile

perron

1 plugin · 100 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers)

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/live-auto-refresh/live-auto-refresh.min.js
Script Paths
/wp-content/plugins/live-auto-refresh/live-auto-refresh.min.js
Version Parameters
live-auto-refresh.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
autorefreshbuttonenabledautorefreshbuttondisabled
HTML Comments
/*AUTO REFRESH*/
JS Globals
autoRefresh
REST Endpoints
/wp-json/perron/v1/settings
FAQ

Frequently Asked Questions about Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers)