WP-Safety

Opal Sync Media to Amazon S3 Security & Risk Analysis

wordpress.org/plugins/opal-aws-s3

This plugin uploads files from the WordPress media directory to an AWS S3 bucket and replaces their original URLs with the corresponding S3 or CloudFr …

0 active installs v1.3.0 PHP 7.0+ WP 5.0+ Updated Dec 5, 2025
awscdnmedias3
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Opal Sync Media to Amazon S3 Safe to Use in 2026?

Generally Safe

Score 100/100

Opal Sync Media to Amazon S3 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The 'opal-aws-s3' plugin v1.3.0 demonstrates a generally strong security posture based on the provided static analysis and vulnerability history. The plugin successfully implements authentication and authorization checks on all identified AJAX handlers and REST API routes, leaving no entry points directly exposed. Furthermore, the high percentage of SQL queries using prepared statements and properly escaped outputs are positive indicators of secure coding practices. The absence of known vulnerabilities in its history also contributes to a favorable security profile.

Vulnerabilities
None known

Opal Sync Media to Amazon S3 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Opal Sync Media to Amazon S3 Code Analysis

Dangerous Functions
0
Raw SQL Queries
3
33 prepared
Unescaped Output
11
123 escaped
Nonce Checks
11
Capability Checks
1
File Operations
1
External Requests
0
Bundled Libraries
3

Bundled Libraries

Select2jQueryGuzzle

SQL Query Safety

92% prepared36 total queries

Output Escaping

92% escaped134 total outputs
Data Flows
All sanitized

Data Flow Analysis

5 flows
handle_import_settings (includes\classes\class-oaws-settings.php:382)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Opal Sync Media to Amazon S3 Attack Surface

Entry Points12
Unprotected0

AJAX Handlers 11

authwp_ajax_oaws_start_ajax_scanincludes\classes\class-oaws-scanning.php:42
authwp_ajax_oaws_stop_ajax_scanincludes\classes\class-oaws-scanning.php:43
authwp_ajax_oaws_reset_all_scannedincludes\classes\class-oaws-scanning.php:44
authwp_ajax_oaws_check_connectionincludes\classes\class-oaws-settings.php:47
authwp_ajax_oaws_handle_settings_formincludes\classes\class-oaws-settings.php:48
authwp_ajax_oaws_settings_exportincludes\classes\class-oaws-settings.php:49
authwp_ajax_oaws_handle_import_settingsincludes\classes\class-oaws-settings.php:50
authwp_ajax_oaws_get_upload_statusincludes\classes\class-oaws-uploading.php:47
authwp_ajax_oaws_manual_upload_attachmentincludes\classes\class-oaws-uploading.php:48
authwp_ajax_oaws_requeue_failed_uploadsincludes\classes\class-oaws-uploading.php:49
authwp_ajax_oaws_reset_all_uploadedincludes\classes\class-oaws-uploading.php:50

REST API Routes 1

GET/wp-json/oaws/v1/run-scan/includes\classes\class-oaws-settings.php:540
WordPress Hooks 19
actionadmin_enqueue_scriptsincludes\classes\class-oaws-run.php:45
actionadmin_footerincludes\classes\class-oaws-settings.php:44
actionadmin_menuincludes\classes\class-oaws-settings.php:45
filtercron_schedulesincludes\classes\class-oaws-settings.php:52
actionrest_api_initincludes\classes\class-oaws-settings.php:54
filteresc_htmlincludes\classes\class-oaws-settings.php:375
actioninitincludes\classes\class-oaws-url.php:39
filterwp_get_attachment_urlincludes\classes\class-oaws-url.php:46
filterwp_get_attachment_image_srcincludes\classes\class-oaws-url.php:51
filterwp_calculate_image_srcsetincludes\classes\class-oaws-url.php:59
filterwp_prepare_attachment_for_jsincludes\classes\class-oaws-url.php:66
filterthe_contentincludes\classes\class-oaws-url.php:76
filterwidget_textincludes\classes\class-oaws-url.php:77
filterthe_excerptincludes\classes\class-oaws-url.php:78
filterthe_editor_contentincludes\classes\class-oaws-url.php:81
filterrest_prepare_postincludes\classes\class-oaws-url.php:82
filteresc_htmlincludes\helpers\core.php:35
filteresc_htmlincludes\helpers\core.php:151
filteresc_htmlincludes\helpers\core.php:203
Maintenance & Trust

Opal Sync Media to Amazon S3 Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 5, 2025
PHP min version7.0
Downloads431

Community Trust

Rating0/100
Number of ratings0
Active installs0
Alternatives

Opal Sync Media to Amazon S3 Alternatives

Upcasted S3 Offload – AWS S3, DigitalOcean Spaces, Backblaze, MinIO Storage Integration

Upcasted S3 Offload – AWS S3, DigitalOcean Spaces, Backblaze, MinIO Storage Integration

upcasted-s3-offload

A
99

Easily migrate and manage WordPress Media Library files to AWS S3 or S3-compatible storage providers. Boost performance and reduce hosting costs.

200 1 CVE
Sync media with AWS S3 CloudFront

Sync media with AWS S3 CloudFront

sync-media-with-aws-s3-cloudfront

A
100

Plugin uploads the files from WordPress media upload directory to AWS S3 bucket and replaces their initial URLs with the new URLs of AWS S3 bucket (ch …

40 No CVEs
S3 Spaces Sync

S3 Spaces Sync

s3-spaces-sync

A
85

This plugin is allow you to synchronize your WordPress media library with DigitalOcean Spaces.

10 No CVEs
Articla media offload lite for oracle cloud infrastructure

Articla media offload lite for oracle cloud infrastructure

articla-media-offload-lite-for-oracle-cloud-infrastructure

A
100

Offload your Media Library to Oracle Cloud (OCI) via S3. Supports private and public buckets.

0 No CVEs
Swift Offload

Swift Offload

swift-offload

A
100

Offload WordPress media to Amazon S3, Wasabi, DigitalOcean Spaces, or MinIO. Serve files via CloudFront CDN for faster delivery.

0 No CVEs
Developer Profile

Opal Sync Media to Amazon S3 Developer Profile

wpopal

19 plugins · 3K total installs

81
trust score
Avg Security Score
90/100
Avg Patch Time
50 days
View full developer profile
Detection Fingerprints

How We Detect Opal Sync Media to Amazon S3

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/opal-aws-s3/assets/css/styles.css/wp-content/plugins/opal-aws-s3/assets/css/libs/jquery.toast.min.css/wp-content/plugins/opal-aws-s3/assets/css/libs/select2.css/wp-content/plugins/opal-aws-s3/assets/css/libs/sweetalert2.min.css/wp-content/plugins/opal-aws-s3/assets/js/libs/input-number-format.jquery.js/wp-content/plugins/opal-aws-s3/assets/js/libs/jquery.toast.js/wp-content/plugins/opal-aws-s3/assets/js/libs/select2.full.js/wp-content/plugins/opal-aws-s3/assets/js/libs/sweetalert2.all.js+2 more
Script Paths
/wp-content/plugins/opal-aws-s3/assets/js/libs/input-number-format.jquery.js/wp-content/plugins/opal-aws-s3/assets/js/libs/jquery.toast.js/wp-content/plugins/opal-aws-s3/assets/js/libs/select2.full.js/wp-content/plugins/opal-aws-s3/assets/js/libs/sweetalert2.all.js/wp-content/plugins/opal-aws-s3/assets/js/settings.js/wp-content/plugins/opal-aws-s3/assets/js/scanning.js
Version Parameters
opal-aws-s3/assets/css/styles.css?ver=opal-aws-s3/assets/css/libs/jquery.toast.min.css?ver=opal-aws-s3/assets/css/libs/select2.css?ver=opal-aws-s3/assets/css/libs/sweetalert2.min.css?ver=opal-aws-s3/assets/js/libs/input-number-format.jquery.js?ver=opal-aws-s3/assets/js/libs/jquery.toast.js?ver=opal-aws-s3/assets/js/libs/select2.full.js?ver=opal-aws-s3/assets/js/libs/sweetalert2.all.js?ver=opal-aws-s3/assets/js/settings.js?ver=opal-aws-s3/assets/js/scanning.js?ver=

HTML / DOM Fingerprints

JS Globals
oaws_script
REST Endpoints
/wp-json/opal-aws-s3/v1/cron-job
FAQ

Frequently Asked Questions about Opal Sync Media to Amazon S3