WP-Safety

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Security & Risk Analysis

wordpress.org/plugins/live-auto-refresh

Instantly reloads the browser when any theme file code is edited during development or when a content edit is saved.

100 active installs v3.2.1 PHP 7.0+ WP 4.7+ Updated Jul 9, 2025
auto-refreshhot-reloadlive-reloadrefreshreload
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Safe to Use in 2026?

Generally Safe

Score 100/100

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

The plugin "live-auto-refresh" v3.2.1 exhibits a generally good security posture based on the provided static analysis. The absence of known CVEs, dangerous functions, raw SQL queries, file operations, and external HTTP requests is a strong indicator of responsible development. The presence of nonce and capability checks, along with a high percentage of properly escaped output, further strengthens this assessment. However, it's important to note that the static analysis identified two AJAX handlers, and while it states zero are unprotected, the existence of these entry points always carries a theoretical risk that warrants careful monitoring. The lack of any recorded vulnerabilities in its history is a positive sign but doesn't entirely eliminate the possibility of undiscovered issues.

Vulnerabilities
None known

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Release Timeline

v3.2.1Current
v3.2
v3.1
v3.0
v2.2
v2.1
v2.0
v1.1
v1.0
Code Analysis
Analyzed Mar 16, 2026

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
14 escaped
Nonce Checks
3
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

88% escaped16 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

3 flows
perron_auto_refresh_toolbar_link (live-auto-refresh.php:146)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Attack Surface

Entry Points2
Unprotected0

AJAX Handlers 2

authwp_ajax_auto_refreshlive-auto-refresh.php:92
noprivwp_ajax_auto_refreshlive-auto-refresh.php:93
WordPress Hooks 10
actionwp_enqueue_scriptslive-auto-refresh.php:22
actionwp_enqueue_scriptslive-auto-refresh.php:109
actionsave_postlive-auto-refresh.php:114
actionacf/save_postlive-auto-refresh.php:116
actionelementor/document/save_datalive-auto-refresh.php:121
actionfl_builder_before_save_layoutlive-auto-refresh.php:128
actionbricks/builder/save_datalive-auto-refresh.php:135
actionadmin_bar_menulive-auto-refresh.php:173
actionwp_headlive-auto-refresh.php:178
actionadmin_menulive-auto-refresh.php:197
Maintenance & Trust

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJul 9, 2025
PHP min version7.0
Downloads6K

Community Trust

Rating86/100
Number of ratings6
Active installs100
Alternatives

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Alternatives

Easy Auto Reload – Auto Refresh

Easy Auto Reload – Auto Refresh

easy-auto-reload

A
100

Auto-refresh your WordPress pages on user inactivity. Keep sessions alive, nonces fresh, and engagement high with this lightweight plugin.

1K No CVEs
Force Refresh

Force Refresh

force-refresh

A
100

Force Refresh is a simple plugin that allows you to force a page refresh for users currently visiting your site on a per-page or post basis.

4K No CVEs
Image Refresh

Image Refresh

mpress-image-refresh

A
92

Show a fresh image on every page load.

1K No CVEs
WP Auto Reload Widgets

WP Auto Reload Widgets

wp-auto-reload-widgets

A
85

Wp Auto Reload Widgets plugin allow you to refresh all of widgets in period of time. Set time in seconds and automatically refresh.

100 No CVEs
Live Data Display

Live Data Display

auto-refresh-api-ajax

A
100

Load JSON data via API, display it on your WordPress site, and auto-refresh it at custom intervals — without reloading the page.

20 No CVEs
Developer Profile

Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers) Developer Profile

perron

1 plugin · 100 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers)

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/live-auto-refresh/live-auto-refresh.min.js
Script Paths
/wp-content/plugins/live-auto-refresh/live-auto-refresh.min.js
Version Parameters
live-auto-refresh.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
autorefreshbuttonenabledautorefreshbuttondisabled
HTML Comments
/*AUTO REFRESH*/
JS Globals
autoRefresh
REST Endpoints
/wp-json/perron/v1/settings
FAQ

Frequently Asked Questions about Live Auto Refresh (Hot Reload / Live Reload for WordPress Developers)