Optimize More! – Images Security & Risk Analysis

wordpress.org/plugins/optimize-more-images

A lightweight yet powerful image, iframe, and video optimization plugin. Lazy load, preload, and more. No jquery dependency.

80 active installs v1.1.3 PHP 7.4+ WP 5.8+ Updated May 21, 2023
core-web-vitalslazy-loadlazyloadpagespeedperformance
63
C · Use Caution
CVEs total1
Unpatched1
Last CVEFeb 3, 2026
Download
Safety Verdict

Is Optimize More! – Images Safe to Use in 2026?

Use With Caution

Score 63/100

Optimize More! – Images has 1 unpatched vulnerability. Evaluate alternatives or apply available mitigations.

1 known CVE 1 unpatched Last CVE: Feb 3, 2026Updated 2yr ago
Risk Assessment

The plugin 'optimize-more-images' v1.1.3 exhibits a generally good security posture based on the static analysis. The absence of any identified critical or high severity taint flows, along with the use of prepared statements for all SQL queries and a decent percentage of properly escaped output, are positive indicators. The presence of nonce and capability checks further strengthens its defenses. However, a significant concern remains the existence of one unpatched medium severity vulnerability from its history. The reported CVE with a 'Missing Authorization' type suggests a potential for privilege escalation or unauthorized access, which is a serious oversight even if it's medium severity.

Key Concerns

  • One unpatched medium severity CVE
  • Some output not properly escaped
Vulnerabilities
1

Optimize More! – Images Security Vulnerabilities

CVEs by Year

1 CVE in 2026 · unpatched
2026
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2025-67624medium · 5.3Missing Authorization

Optimize More! – Images <= 1.1.3 - Missing Authorization

Feb 3, 2026Unpatched
Code Analysis
Analyzed Mar 16, 2026

Optimize More! – Images Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
11
45 escaped
Nonce Checks
2
Capability Checks
1
File Operations
2
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

80% escaped56 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
import (includes\classes\Settings.php:129)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Optimize More! – Images Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 25
actionadmin_menuincludes\classes\Admin_Core.php:12
actionadmin_headincludes\classes\Admin_Core.php:15
filterplugin_row_metaincludes\classes\Admin_Core.php:18
actionadmin_enqueue_scriptsincludes\classes\Admin_Core.php:109
actioninitincludes\classes\Images.php:12
actioninitincludes\classes\Images.php:13
actioninitincludes\classes\Images.php:14
actioninitincludes\classes\Images.php:15
filterwp_lazy_loading_enabledincludes\classes\Images.php:28
actionadmin_noticesincludes\classes\Messages.php:58
actiontemplate_redirectincludes\classes\partials\add-img-attr.php:14
actiontemplate_redirectincludes\classes\partials\add-loading-eager.php:15
actiontemplate_redirectincludes\classes\partials\lazy-css-bg-images.php:20
actionwp_enqueue_scriptsincludes\classes\partials\lazy-load.php:50
filterthe_contentincludes\classes\partials\lazy-load.php:52
filterthe_contentincludes\classes\partials\lazy-load.php:53
filterthe_contentincludes\classes\partials\lazy-load.php:54
actiontemplate_redirectincludes\classes\partials\lazy-load.php:57
actionwp_headincludes\classes\partials\preload-featured-imgs.php:19
actiontemplate_redirectincludes\classes\partials\preload-featured-imgs.php:21
actionwp_headincludes\classes\partials\use-img-cdn.php:13
actiontemplate_redirectincludes\classes\partials\use-img-cdn.php:15
actioninitincludes\classes\Settings.php:14
actionopm_img_after_bodyincludes\classes\Settings.php:15
actionactivated_pluginoptimize-more-images.php:54
Maintenance & Trust

Optimize More! – Images Maintenance & Trust

Maintenance Signals

WordPress version tested6.2.9
Last updatedMay 21, 2023
PHP min version7.4
Downloads9K

Community Trust

Rating100/100
Number of ratings4
Active installs80
Developer Profile

Optimize More! – Images Developer Profile

Arya Dhiratara

6 plugins · 4K total installs

82
trust score
Avg Security Score
83/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Optimize More! – Images

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/optimize-more-images/assets/js/admin-settings.js/wp-content/plugins/optimize-more-images/assets/js/jquery.validate.min.js/wp-content/plugins/optimize-more-images/assets/js/ays-beforeunload-shim.js/wp-content/plugins/optimize-more-images/assets/js/jquery-areyousure.js/wp-content/plugins/optimize-more-images/assets/css/admin-settings.css
Script Paths
/wp-content/plugins/optimize-more-images/assets/js/admin-settings.js/wp-content/plugins/optimize-more-images/assets/js/jquery.validate.min.js/wp-content/plugins/optimize-more-images/assets/js/ays-beforeunload-shim.js/wp-content/plugins/optimize-more-images/assets/js/jquery-areyousure.js
Version Parameters
optimize-more-images/assets/js/admin-settings.js?ver=optimize-more-images/assets/js/jquery.validate.min.js?ver=optimize-more-images/assets/js/ays-beforeunload-shim.js?ver=optimize-more-images/assets/js/jquery-areyousure.js?ver=optimize-more-images/assets/css/admin-settings.css?ver=

HTML / DOM Fingerprints

JS Globals
OPM_IMG_VERSION
FAQ

Frequently Asked Questions about Optimize More! – Images