[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGLTg84nWqD4HG0ci-K1rlxzfOCBTWDo335D00XIhrw8":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":38,"analysis":137,"fingerprints":238},"oxyplug-preload","Oxyplug Preload","2.1.3","Oxyplug Team","https:\u002F\u002Fprofiles.wordpress.org\u002Foxyplug\u002F","\u003Cp>Preload post\u002Fpage featured images and product images to enhance the Largest Contentful Paint (LCP) and achieve a better Core Web Vitals (CWV) score in Google’s Lighthouse. Additionally, the tool supports preloading fonts, CSS, and JavaScript files when specified manually, allowing for even greater optimization of page load performance.\u003C\u002Fp>\n","Preload featured images to improve the Largest Contentful Paint (LCP) and to get a better Core Web Vital (CWV) score on Google's Lighthouse.",600,7747,100,6,"2025-05-15T10:43:00.000Z","6.8.5","4.9","7.4",[20,21,22,23,24],"core-web-vital","lcp","preload","resource-hint","seo","https:\u002F\u002Fwww.oxyplug.com\u002Fproducts\u002Foxy-preload","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foxyplug-preload.2.1.3.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":13,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"oxyplug",5,830,30,94,"2026-04-04T07:12:48.100Z",[39,54,75,95,115],{"slug":40,"name":41,"version":42,"author":7,"author_profile":8,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":27,"num_ratings":27,"last_updated":47,"tested_up_to":16,"requires_at_least":48,"requires_php":49,"tags":50,"homepage":52,"download_link":53,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"oxyplug-image","Oxyplug Image","1.0.3","\u003Cp>\u003Cstrong>Oxyplug Image\u003C\u002Fstrong> speeds up your website by automatically optimizing your images. It compresses your photos, creates multiple display-ready versions (1X, 2X, 2.8X, and 3X DPRs, including \u003Cstrong>Retina Display\u003C\u002Fstrong> quality), and converts them to faster formats like WebP, and (AVIF available in Premium). It also preloads your featured images to improve your Largest Contentful Paint (LCP) and boost your Core Web Vitals score on Google Lighthouse.\u003C\u002Fp>\n\u003Cp>Oxyplug Image gives you the flexibility to load images using either the standard \u003Cstrong>\u003C\u002Fstrong> tag or the advanced \u003Cstrong>\u003C\u002Fstrong> tag for better browser compatibility and performance.\u003C\u002Fp>\n\u003Cp>For safety, the plugin automatically saves a \u003Cstrong>backup of your original images,\u003C\u002Fstrong> and you can choose how long to keep them (default is 60 days). You can restore any original image at any time during that period. Even if you deactivate or uninstall the plugin, all \u003Cstrong>optimized images remain on your server\u003C\u002Fstrong> and continue to work normally.\u003C\u002Fp>\n\u003Ch3>Key benefits for everyday users:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Makes images load much faster without losing quality\u003C\u002Fli>\n\u003Cli>Creates high-resolution images for \u003Cstrong>Retina screens\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Automatically generates 1X, 2X, and 2.8X images (3X Premium)\u003C\u002Fli>\n\u003Cli>Helps your site perform better on Google\u003C\u002Fli>\n\u003Cli>Fully automatic, no technical skills required\u003C\u002Fli>\n\u003Cli>Reduces server load and saves bandwidth\u003C\u002Fli>\n\u003Cli>Supports both  and  tags for maximum flexibility\u003C\u002Fli>\n\u003Cli>Bulk image optimization\u003C\u002Fli>\n\u003Cli>Safe backup system with user-configurable retention period\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>(Premium) Features:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>AVIF image format\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>3X DPR image generation\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Image and text watermarks\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Add copyright information\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>More image credits\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n","Oxyplug Image is a WordPress.org plugin that optimize your site by compressing your images, creating 1X, 2X, 2.8X and 3x images and more...",10,321,"2025-12-02T13:59:00.000Z","6.0","8.1",[21,51,22,23,24],"optimize","https:\u002F\u002Fwww.oxyplug.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foxyplug-image.1.0.3.zip",{"slug":55,"name":56,"version":57,"author":58,"author_profile":59,"description":60,"short_description":61,"active_installs":62,"downloaded":63,"rating":64,"num_ratings":33,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":73,"download_link":74,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"preload-lcp-image","Preload LCP Image","1.5.1","Rhys Wynne","https:\u002F\u002Fprofiles.wordpress.org\u002Frhyswynne\u002F","\u003Cp>This plugin will add the ability to preload the largest contentful paint (LCP) Image on an individual page or post. This is designed to remove the “Preload the image used by the LCP element in order to improve your LCP time” warning that Google’s Pagespeed Insights sometimes serves.\u003C\u002Fp>\n\u003Ch4>For Support\u003C\u002Fh4>\n\u003Cp>I offer support in two places:-\u003C\u002Fp>\n\u003Cul>\n\u003Cli>For urgent (paid for) support, please \u003Ca href=\"https:\u002F\u002Fdwinrhys.com\u002Fcontact-me\u002F?utm_source=wordpressorgtext&utm_medium=wordpress&utm_campaign=preload_lcp\" rel=\"nofollow ugc\">contact me directly\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>For not so urgent support, please use the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fpreload-lcp-image\u002F\" rel=\"ugc\">WordPress.org forums\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>On Github\u003C\u002Fh4>\n\u003Cp>This project is now on github, \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Frhyswynne\u002Fpreload-lcp-image-wordpress\" rel=\"nofollow ugc\">you can view the repository here\u003C\u002Fa>. There are other versions, but this is the one I’ve put up, so where all the developmental will be tracked.\u003C\u002Fp>\n","Allows you to specify on individual pages or posts the Largest Contentful Paint (LCP) Image on that page to preload, making the page load quicker.",4000,40429,96,"2025-12-11T10:41:00.000Z","6.9.4","6.1.2","8.0",[70,21,22,71,72],"largest-contentful-paint","site-optimisation","site-speed","https:\u002F\u002Fdwinrhys.com\u002Fpreload-largest-contentful-paint-image-wordpress-plugin\u002F?utm_source=wordpressorgplugin&utm_medium=wordpress&utm_campaign=preload_lcp","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpreload-lcp-image.1.5.1.zip",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":85,"num_ratings":86,"last_updated":87,"tested_up_to":66,"requires_at_least":88,"requires_php":89,"tags":90,"homepage":89,"download_link":94,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"critical-css-for-wp","Reduce Unused CSS Solution with Critical CSS For WP","1.0.22","Magazine3","https:\u002F\u002Fprofiles.wordpress.org\u002Fmagazine3\u002F","\u003Cp>Critical CSS For WP removes the unused CSS which helps to paint fast and render the above fold content, before downloading the complete css files. We intends to provide great experience to the web page visitors by improving the performance of the web page.\u003C\u002Fp>\n\u003Ch3>Works well with:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>WP Rocket\u003C\u002Fli>\n\u003Cli>Autoptimize\u003C\u002Fli>\n\u003Cli>Aruba HiSpeed Cache\u003C\u002Fli>\n\u003Cli>Breeze – WordPress Cache\u003C\u002Fli>\n\u003Cli>Clearfy Cache\u003C\u002Fli>\n\u003Cli>Cache Enabler\u003C\u002Fli>\n\u003Cli>GoDaddy Cache\u003C\u002Fli>\n\u003Cli>Hummingbird\u003C\u002Fli>\n\u003Cli>Kinsta Cache\u003C\u002Fli>\n\u003Cli>LiteSpeed Cache\u003C\u002Fli>\n\u003Cli>Nginx Helper\u003C\u002Fli>\n\u003Cli>Redis Object Cache\u003C\u002Fli>\n\u003Cli>SiteGround SuperCacher\u003C\u002Fli>\n\u003Cli>Speed Booster Pack ⚡ PageSpeed Optimization Suite\u003C\u002Fli>\n\u003Cli>WP Super Cache\u003C\u002Fli>\n\u003Cli>WP Fastest Cache\u003C\u002Fli>\n\u003Cli>W3 Total Cache\u003C\u002Fli>\n\u003Cli>WP-Optimize\u003C\u002Fli>\n\u003Cli>WPEngine Cache\u003C\u002Fli>\n\u003Cli>WP Speed of Light\u003C\u002Fli>\n\u003Cli>10Web Booster – Website speed optimization, Cache & Page Speed optimizer\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>We Act Fast on Feedback!\u003C\u002Fstrong>\u003Cbr \u002F>\nWe are actively developing this plugin and our aim is to make this plugin into the #1 solution for generating Critical CSS in the world. You can \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fahmedkaludi\u002Fcritical-css-for-wp\u002Fissues\" rel=\"nofollow ugc\">Request a Feature or Report a Bug\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Technical Support\u003C\u002Fstrong>\u003Cbr \u002F>\nSupport is provided in \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcritical-css-for-wp\u002F\" rel=\"ugc\">Forum\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Would you like to contribute?\u003C\u002Fstrong>\u003Cbr \u002F>\nYou may now contribute to this Critical CSS For WP plugin on Github: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fahmedkaludi\u002Fcritical-css-for-wp\" rel=\"nofollow ugc\">View repository\u003C\u002Fa> on Github\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong> CSS from HTML extractor \u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Author: Jan Decavele\u003C\u002Fli>\n\u003Cli>URL: https:\u002F\u002Fgithub.com\u002FJanDC\u002Fcss-from-html-extractor\u003C\u002Fli>\n\u003Cli>License: The MIT License (MIT)\u003C\u002Fli>\n\u003Cli>License URL: https:\u002F\u002Fgithub.com\u002FJanDC\u002Fcss-from-html-extractor?tab=License-1-ov-file\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong> PHP Secure Communications Library \u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Author: DataTables\u003C\u002Fli>\n\u003Cli>URL:https:\u002F\u002Fgithub.com\u002FDataTables\u002FDataTables\u003C\u002Fli>\n\u003Cli>License: The MIT License (MIT)\u003C\u002Fli>\n\u003Cli>License URL: https:\u002F\u002Fgithub.com\u002FDataTables\u002FDataTables?tab=MIT-1-ov-file\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n","Critical CSS For WP removes the unused CSS which helps to paint fast and render the above fold content, before downloading the complete css files.",1000,50489,74,12,"2025-12-02T08:59:00.000Z","3.0","",[91,20,92,93,24],"cache","critical","critical-css","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcritical-css-for-wp.1.0.22.zip",{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":103,"downloaded":104,"rating":105,"num_ratings":14,"last_updated":106,"tested_up_to":16,"requires_at_least":107,"requires_php":89,"tags":108,"homepage":89,"download_link":114,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"cls-lcp-issues-fix","WP Google Core Web Vitals Fix","1.0.8","SEOBoost","https:\u002F\u002Fprofiles.wordpress.org\u002Froshellco\u002F","\u003Cp>🚀 \u003Cstrong>Boost Your Site’s Speed & Rankings by Fixing Google Core Web Vitals Issues!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>WP Google Core Web Vitals Fix\u003C\u002Fstrong> is a powerful yet simple plugin designed to help you analyze and improve your website’s performance based on Google’s \u003Cstrong>Core Web Vitals\u003C\u002Fstrong>: Largest Contentful Paint (LCP), Cumulative Layout Shift (CLS), and First Input Delay (FID).\u003C\u002Fp>\n\u003Cp>While WordPress powers millions of websites using 100,000+ different plugins and themes, optimizing each one for performance is a challenge. This plugin provides essential insights and baseline optimization suggestions to help you resolve the most critical Web Vitals issues—\u003Cstrong>without modifying core files or breaking your site\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Metrics Addressed:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>LCP (Largest Contentful Paint):\u003C\u002Fstrong> Helps identify slow-loading elements affecting your site’s perception of speed.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CLS (Cumulative Layout Shift):\u003C\u002Fstrong> Detects unstable visual elements that shift while loading, hurting user experience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>FID (First Input Delay):\u003C\u002Fstrong> Points out delays in browser response when users interact with your content.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>While deep optimization often requires manual tuning by professionals, \u003Cstrong>this plugin is a great starting point\u003C\u002Fstrong>. It highlights where improvements can be made and whether you’re in need of professional intervention.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>✅ LCP Issue Identification & Fix Suggestions  \u003C\u002Fli>\n\u003Cli>✅ CLS Detection & Optimization Recommendations  \u003C\u002Fli>\n\u003Cli>✅ FID Metrics Overview  \u003C\u002Fli>\n\u003Cli>✅ Mobile-Friendly Optimization Check  \u003C\u002Fli>\n\u003Cli>✅ Non-Invasive: No changes to WordPress Core or theme code  \u003C\u002Fli>\n\u003Cli>✅ Simple UI – easy to understand results  \u003C\u002Fli>\n\u003Cli>✅ Perfect companion for Google Search Console users  \u003C\u002Fli>\n\u003Cli>✅ Compatible with any theme or plugin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Why This Plugin Matters\u003C\u002Fh3>\n\u003Cp>Poor Core Web Vitals can directly affect your search rankings and user engagement. Even beautiful, content-rich sites may struggle to rank if they load slowly or jump around visually. \u003Cstrong>This plugin empowers you to take control of your performance metrics\u003C\u002Fstrong>, find out what’s wrong, and begin the journey to a faster, more stable, and more SEO-friendly site.\u003C\u002Fp>\n\u003Cp>If your \u003Cstrong>Search Console shows errors like “LCP longer than 4s” or “high CLS”\u003C\u002Fstrong>, this plugin will help you identify what’s causing it and how it can be fixed.\u003C\u002Fp>\n","A helpful plugin to identify and guide fixes for LCP, CLS, and FID issues to boost your Core Web Vitals and pass Google's performance benchmarks.",400,12186,86,"2025-07-15T13:13:00.000Z","5.0",[109,110,111,112,113],"cls-issue","core-web-vitals","google-optimization","lcp-issue","web-vitals-fix","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcls-lcp-issues-fix.1.0.8.zip",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":123,"downloaded":124,"rating":13,"num_ratings":125,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":129,"tags":130,"homepage":89,"download_link":135,"security_score":136,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"better-resource-hints","Better Resource Hints","1.1.3","Alex MacArthur","https:\u002F\u002Fprofiles.wordpress.org\u002Falexmacarthur\u002F","\u003Cp>Better Resource Hints will make your WordPress site or application faster and generally more performant by intelligently leveraging resource hints like prefetch, preload, preconnect, and server push.\u003C\u002Fp>\n\u003Cp>As it stands, WordPress isn’t that bad about providing a base level of these hints. In fact, a basic, dedicated API has been \u003Ca href=\"https:\u002F\u002Fmake.wordpress.org\u002Fcore\u002F2016\u002F07\u002F06\u002Fresource-hints-in-4-6\u002F\" rel=\"nofollow ugc\">shipped since version 4.6.\u003C\u002Fa>. However, this functionality only scratches the service, providing only \u003Ccode>dns-prefetch\u003C\u002Fcode> tags out of the box, and there’s growing opportunity to take advantage of different hints as they are introduced and gain more browser support. Specifically, this plugin focuses on the following types of hints for your styles and JavaScript assets:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Preconnecting\u003C\u002Fstrong> – This hint is similar to “dns-prefetch,” but a beefier version. Instead of just resolving the DNS, the preconnect hint handles TLS negotiations and TCP handshakes, resulting in reduced page latency.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Preloading\u003C\u002Fstrong> – Preloading occurs when the browser is told it can start downloading an asset in the background early during page load, instead of waiting until the asset is explicitly called to start the process. This hint is most beneficial for assets loaded later on in the page, but are nonetheless essential to the page’s functionality. More often than not, this is a JavaScript file. Enabling this results in an overall faster load time, and quicker time to interactive.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Prefetching\u003C\u002Fstrong> – Prefetching assets is similar to preloading, but the assets are downloaded in low priority for the purpose of caching them for later use. For example, if a user hits your home page and is likely to go to a page that uses a heavy JavaScript file, it’s wise to prefetch that asset on the home page, so it’s cached and ready to go on the next. Again, the result is a quicker subsequent page load, quicker time to interactive, and an improved overall user experience. This is different from DNS prefetching, which will only resolve the DNS of a resource’s host, and not actually download the resource itself.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Server Push\u003C\u002Fstrong> – If enabled, server push will tell your server to start delivering an asset before the browser even asks for it. This results in a much faster delivery of key assets, and be toggled on for both preloaded, prefetched, and preconnected assets. \u003Cstrong>Note: This feature requires a server that supports server push, and is the most experimental strategy this plugin provides.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>As with any sort of performance-enhancing technique, just be aware that they should be used judiciously, and that the results you see will depend on the size the of resources your site loads, as well as how your server is configured. For additional reading, see some of the resources below:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fmedium.com\u002Freloading\u002Fpreload-prefetch-and-priorities-in-chrome-776165961bbf\" rel=\"nofollow ugc\">Preload, Prefetch, & Priorities in Chrome\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fweb\u002Ftools\u002Flighthouse\u002Faudits\u002Fpreload\" rel=\"nofollow ugc\">Preloading Key Requests\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.smashingmagazine.com\u002F2016\u002F02\u002Fpreload-what-is-it-good-for\u002F\" rel=\"nofollow ugc\">Preload: What’s It Good For?\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.keycdn.com\u002Fblog\u002Fresource-hints\u002F\" rel=\"nofollow ugc\">Resource Hints – What is Preload, Prefetch, and Preconnect?\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>What Makes This Plugin Stand Apart?\u003C\u002Fh4>\n\u003Cp>There’s no shortage of plugins out there that aim to leverage resource hints for boosting performance. However, I’ve seen that several of them make the following mistakes:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Inflexible Hint Management\u003C\u002Fstrong> Many similar plugins only provide very limited flexibility in their options, and only allow setting hints globally for every page, regardless of whether the resources are actually needed on the page. This can often result in unecessarily bloaging your bandwidth, since hints on several pages are effectively useless. In some cases, this could actually lead to a less performant site. This plugin attempts to provide options to manage hints more flexibily and intelligently, meaning you won’t be unecessarily preloading assets in the background when they’re not even needed on the page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Misunderstanding What Different Hints Do\u003C\u002Fstrong> I’ve come across some plugins that fail to understand and leverage different hints like they were designed. For example, promising that assets are being preloaded, when they’re actually being prefetched. These and other hints have very different purposes, and should not be interchangably used if you want them to impact your site in the most effective way. This plugin attempts to leverage these hints in way to maximize their effectiveness. For example, BHR won’t prefetch any assets that are enqueued on the page, because that’s just not how the prefetch hint is designed to be used.\u003C\u002Fp>\n\u003Cp>Is Better Resource Hints perfect? Absolutely not. That’s why I encourage any constructive feedback or bug reports to be sent my way immediately, so that I can’t improve this plugin as quickly as possible.\u003C\u002Fp>\n\u003Ch4>A Note About Preloading CSS\u003C\u002Fh4>\n\u003Cp>Because of their high placement on a page, if the option is enabled, your CSS files will be asyncronously preloaded, and \u003Cem>then\u003C\u002Fem> turned into a stylesheet once they’ve completely loaded. The advantage to doing this is that while the files are downloading, they won’t block the rest of the page from rendering, resulting an overall faster page load.\u003C\u002Fp>\n\u003Cp>However, this also means that there may be a flash of unstyled content on the page for a brief moment as the files download. To prevent this, it’s recommended to only preload CSS files that are not critical to the initial view of the page. This will allow you to gain some performance points without sacrificing use experience as the page loads.\u003C\u002Fp>\n\u003Ch3>Filters\u003C\u002Fh3>\n\u003Cp>The following filters are exposed for your use.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002F**\n* Modify the HTML link generated for preconnecting hosts.\n*\n* @param string $link (HTML tag)\n* @param string $url (URL of the host)\n* @return string\n*\u002F\nadd_filter('better_resource_hints_preconnect_tag', function ($link, $url) {\n    return $url;\n}, 10, 2);\n\n\n\n\u002F**\n* Modify the HTML link generated for prefetching hosts.\n*\n* @param string $link (HTML tag)\n* @param string $handle (WP handle of the resource\n* @param string $type (script or style)\n* @return string\n*\u002F\nadd_filter('better_resource_hints_prefetch_tag', function ($link, $handle, $type) {\n    return $url;\n}, 10, 3);\n\n\n\n\u002F**\n* Modify the HTML link generated for preloading hosts.\n*\n* @param string $link (HTML tag)\n* @param string $handle (WP handle of the resource\n* @param string $type (script or style)\n* @return string\n*\u002F\nadd_filter('better_resource_hints_preload_tag', function ($link, $handle, $type) {\n    return $url;\n}, 10, 3);\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch3>What Happens Out of the Box?\u003C\u002Fh3>\n\u003Cp>Upon activation, Better Resource Hints will optimize your resource hints in a conservative, low-risk way by only doing two things out of the box:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Preloading JavaScript assets enqueued in the footer.\u003C\u002Fli>\n\u003Cli>Setting preconnect hints for all third party hosts that already have dns-preconnect hints.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Using the Plugin\u003C\u002Fh3>\n\u003Cp>After activation, you are able to adjust settings to tweak optimization as seen fit. As a means of testing your optimizations, use a tool like \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fweb\u002Ftools\u002Flighthouse\u002F\" rel=\"nofollow ugc\">Google Lighthouse\u003C\u002Fa> to measure the impact of these changes on your site’s performance.\u003C\u002Fp>\n\u003Cp>As mentioned, the techniques used here are largely supported by modern browsers, but your results may vary depending on the amount of assets being loaded on your site, as well as your server configuration.\u003C\u002Fp>\n\u003Ch3>Feedback\u003C\u002Fh3>\n\u003Cp>You like it? \u003Ca href=\"mailto:alex@macarthur.me\" rel=\"nofollow ugc\">Email\u003C\u002Fa> or \u003Ca href=\"http:\u002F\u002Fwww.twitter.com\u002Famacarthur\" rel=\"nofollow ugc\">tweet\u003C\u002Fa> me. You hate it? \u003Ca href=\"mailto:alex@macarthur.me\" rel=\"nofollow ugc\">Email\u003C\u002Fa> or \u003Ca href=\"http:\u002F\u002Fwww.twitter.com\u002Famacarthur\" rel=\"nofollow ugc\">tweet\u003C\u002Fa> me.\u003C\u002Fp>\n\u003Cp>Regardless of how you feel, your review would be greatly appreciated!\u003C\u002Fp>\n","Better Resource Hints will make your WordPress site or application faster and generally more performant by intelligently leveraging resource hints lik &hellip;",200,10965,3,"2019-02-12T03:24:00.000Z","5.0.25","4.0","5.6",[131,132,22,133,134],"performance","prefetch","resource-hints","server-push","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbetter-resource-hints.1.1.3.zip",85,{"attackSurface":138,"codeSignals":180,"taintFlows":194,"riskAssessment":228,"analyzedAt":237},{"hooks":139,"ajaxHandlers":170,"restRoutes":176,"shortcodes":177,"cronEvents":178,"entryPointCount":179,"unprotectedCount":27},[140,146,150,154,159,162,166],{"type":141,"name":142,"callback":143,"file":144,"line":145},"action","admin_init","init","oxy-preload.php",42,{"type":141,"name":147,"callback":148,"file":144,"line":149},"plugins_loaded","check_required_plugin",45,{"type":141,"name":151,"callback":152,"file":144,"line":153},"admin_menu","add_menu",51,{"type":155,"name":156,"callback":157,"priority":45,"file":144,"line":158},"filter","plugin_action_links","add_settings",54,{"type":141,"name":160,"callback":160,"file":144,"line":161},"admin_head",57,{"type":141,"name":163,"callback":164,"file":144,"line":165},"admin_enqueue_scripts","add_admin_assets",60,{"type":141,"name":167,"callback":168,"file":144,"line":169},"wp_head","add_preload_tag",117,[171],{"action":172,"nopriv":173,"callback":172,"hasNonce":174,"hasCapCheck":173,"file":144,"line":175},"oxyplug_preload_save_preloads",false,true,48,[],[],[],1,{"dangerousFunctions":181,"sqlUsage":182,"outputEscaping":184,"fileOperations":186,"externalRequests":125,"nonceChecks":179,"capabilityChecks":27,"bundledLibraries":193},[],{"prepared":27,"raw":27,"locations":183},[],{"escaped":185,"rawEcho":186,"locations":187},11,2,[188,191],{"file":144,"line":189,"context":190},189,"raw output",{"file":144,"line":192,"context":190},190,[],[195,218],{"entryPoint":196,"graph":197,"unsanitizedCount":179,"severity":217},"oxyplug_preload_save_preloads (oxy-preload.php:500)",{"nodes":198,"edges":214},[199,204,208],{"id":200,"type":201,"label":202,"file":144,"line":203},"n0","source","$_POST",508,{"id":205,"type":206,"label":207,"file":144,"line":203},"n1","transform","→ oxyplug_preload_update_option()",{"id":209,"type":210,"label":211,"file":144,"line":212,"wp_function":213},"n2","sink","update_option() [Settings Manipulation]",762,"update_option",[215,216],{"from":200,"to":205,"sanitized":173},{"from":205,"to":209,"sanitized":173},"low",{"entryPoint":219,"graph":220,"unsanitizedCount":179,"severity":217},"\u003Coxy-preload> (oxy-preload.php:0)",{"nodes":221,"edges":225},[222,223,224],{"id":200,"type":201,"label":202,"file":144,"line":203},{"id":205,"type":206,"label":207,"file":144,"line":203},{"id":209,"type":210,"label":211,"file":144,"line":212,"wp_function":213},[226,227],{"from":200,"to":205,"sanitized":173},{"from":205,"to":209,"sanitized":173},{"summary":229,"deductions":230},"The \"oxyplug-preload\" v2.1.3 plugin exhibits a generally good security posture based on the static analysis provided. The absence of any recorded vulnerabilities in its history is a significant positive indicator. The code demonstrates a strong commitment to secure coding practices, with all SQL queries utilizing prepared statements and a high percentage of output being properly escaped. The attack surface is minimal, with only one AJAX handler and no exposed REST API routes or shortcodes.\n\nHowever, there are areas for concern. The presence of two \"flows with unsanitized paths\" in the taint analysis, even without critical or high severity, suggests a potential for path traversal or similar file system manipulation vulnerabilities if these flows are not handled with extreme care. Furthermore, the complete lack of capability checks on the single AJAX handler is a notable weakness. While the attacker would still need to know the specific AJAX hook, this absence means any authenticated user, regardless of their role or permissions, could potentially trigger this handler, increasing the risk if the handler performs sensitive operations.\n\nIn conclusion, the plugin benefits from a clean vulnerability history and sound practices in SQL and output escaping. The main weaknesses lie in the identified unsanitized path flows and the absence of capability checks on its AJAX endpoint. These factors, while not indicating immediate critical threats based on the provided data, warrant attention to ensure robust security.",[231,234],{"reason":232,"points":233},"Unsanitized paths in taint analysis",8,{"reason":235,"points":236},"No capability checks on AJAX handler",7,"2026-03-16T19:30:23.761Z",{"wat":239,"direct":262},{"assetPaths":240,"generatorPatterns":243,"scriptPaths":244,"versionParams":252},[241,242],"\u002Fwp-content\u002Fplugins\u002Foxyplug-preload\u002Fassets\u002Fjs\u002Fadmin-script.js","\u002Fwp-content\u002Fplugins\u002Foxyplug-preload\u002Fassets\u002Fcss\u002Fadmin-style.css",[],[245,246,247,248,249,250,251],"\u002Fwp-content\u002Fplugins\u002Foxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Foutlined-text-field.js","\u002Fwp-content\u002Fplugins\u002Foxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Ficon.js","\u002Fwp-content\u002Fplugins\u002Foxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Ficon-button.js","\u002Fwp-content\u002Fplugins\u002Foxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Foutlined-button.js","\u002Fwp-content\u002Fplugins\u002Foxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Ffilled-button.js","\u002Fwp-content\u002Fplugins\u002Foxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Fdivider.js","\u002Fwp-content\u002Fplugins\u002Foxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Fswitch.js",[253,254,255,256,257,258,259,260,261],"oxyplug-preload\u002Fassets\u002Fjs\u002Fadmin-script.js?ver=","oxyplug-preload\u002Fassets\u002Fcss\u002Fadmin-style.css?ver=","oxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Foutlined-text-field.js?ver=","oxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Ficon.js?ver=","oxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Ficon-button.js?ver=","oxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Foutlined-button.js?ver=","oxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Ffilled-button.js?ver=","oxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Fdivider.js?ver=","oxyplug-preload\u002Fassets\u002Fjs\u002Fdist\u002Ftools_page_oxyplug-preload-settings\u002Fswitch.js?ver=",{"cssClasses":263,"htmlComments":264,"htmlAttributes":266,"restEndpoints":268,"jsGlobals":269,"shortcodeOutput":272},[],[265],"\u003C!-- Generated by OxyPlug Preload -->",[267],"fetchpriority=\"high\"",[],[270,271],"OXYPLUG_PRELOAD_VERSION","oxyplug_preload_defines",[]]