[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1c7-E280JaJoLuR48vPnva0CLNM6pPEG-c_YGOgT8X0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":36,"analysis":141,"fingerprints":184},"preload-featured-image","Preload Featured Image","1.1","Umut","https:\u002F\u002Fprofiles.wordpress.org\u002Fumutcandan\u002F","\u003Cp>This plugin is a “must-have” for websites using themes that display the Featured Image automatically at the top in single post pages.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>Automatically preloads the Featured Image in posts to improve PageSpeed scores.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Customizable options to choose the image size to preload.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Option to enable or disable the preload functionality.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>GPL2\u003C\u002Fp>\n","Preload Featured Image automatically in posts to increase the PageSpeed Score.",40,1129,0,"2024-11-04T22:05:00.000Z","6.7.5","4.0","",[19,20,21,22,23],"image","image-preload","pagespeed","prefetch","preload","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpreload-featured-image\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpreload-featured-image.zip",92,null,"2026-03-15T15:16:48.613Z",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"umutcandan",1,30,88,"2026-04-03T23:32:56.088Z",[37,57,77,99,117],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":52,"tags":53,"homepage":55,"download_link":56,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"preload-featured-images","Preload Featured Images","1.0.0","WPZOOM","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpzoom\u002F","\u003Cp>Preload Featured Images automatically in posts to increase the PageSpeed Score.\u003C\u002Fp>\n\u003Cp>This plugin is a “must-have” for websites using themes that display the Featured Image automatically at the top in single post pages.\u003C\u002Fp>\n\u003Ch3>Why was this plugin created?\u003C\u002Fh3>\n\u003Cp>Suppose your theme displays the Featured Image at the top in posts automatically. In that case, the chances that the image is the \u003Cstrong>LCP (Largest Contentful Paint)\u003C\u002Fstrong> are very high, so the PageSpeed tool will highly recommend you to preload it.\u003C\u002Fp>\n\u003Cp>Are you getting the following recommendation when testing the PageSpeed score of a single post: \u003Cstrong>“Preload Largest Contentful Paint image”\u003C\u002Fstrong>? Then this plugin will help you!\u003C\u002Fp>\n\u003Ch3>How it works?\u003C\u002Fh3>\n\u003Cp>Go to the \u003Cstrong>Settings > Preload Featured Images\u003C\u002Fstrong> page and choose the image size used by your theme to make sure the right image size is preloaded.\u003C\u002Fp>\n\u003Ch3>Compatible Themes\u003C\u002Fh3>\n\u003Cp>The plugin supports all themes, but it’s very important to choose the right Image Size on the settings page.\u003C\u002Fp>\n\u003Cp>If you are not sure which is the image size used by your theme, simply get in touch with your theme’s developer and they will be able to help you with that.\u003C\u002Fp>\n\u003Cp>If you’re using one of the following popular themes, then the plugin will automatically pick the right Image Size, so you don’t have to configure anything:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Foodica\u003C\u002Fli>\n\u003Cli>Foodica PRO\u003C\u002Fli>\n\u003Cli>Gourmand\u003C\u002Fli>\n\u003Cli>Cookely\u003C\u002Fli>\n\u003Cli>Astra\u003C\u002Fli>\n\u003Cli>Neve\u003C\u002Fli>\n\u003Cli>OceanWP\u003C\u002Fli>\n\u003Cli>GeneratePress\u003C\u002Fli>\n\u003Cli>BlossomRecipe\u003C\u002Fli>\n\u003Cli>Divi\u003C\u002Fli>\n\u003Cli>Ashe\u003C\u002Fli>\n\u003C\u002Ful>\n","Preload Featured Images automatically in posts to increase the PageSpeed Score.",2000,17991,100,3,"2024-07-17T13:40:00.000Z","6.6.5","5.0","7.4",[54,20,21,22,23],"featured-images","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpreload-featured-images\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpreload-featured-images.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":26,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":17,"tags":71,"homepage":74,"download_link":75,"security_score":76,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"preload-images","Preload Images","1.2.1","Ravikumar Patel","https:\u002F\u002Fprofiles.wordpress.org\u002Fravipatel\u002F","\u003Cp>Preload images to get faster page loading experience. Preload Images plugin supports unlimited image urls, good for photo galleries and other image-heavy sites where you want to deliver the photos as seamlessly as possible.\u003C\u002Fp>\n","Similar to DNS prefetching, image preloading\u002Fprefetching with JavaScript to get faster page loading experience.",1000,12142,8,"2023-02-21T21:51:00.000Z","6.1.10","3.8",[72,73,20,22,23],"html-preload","image-prefetch","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpreload-images","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpreload-images.zip",85,{"slug":78,"name":79,"version":80,"author":81,"author_profile":82,"description":83,"short_description":84,"active_installs":85,"downloaded":86,"rating":87,"num_ratings":88,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":17,"tags":92,"homepage":97,"download_link":98,"security_score":76,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"custom-preloader","Custom Preloader","2.0","NikosTsolakos","https:\u002F\u002Fprofiles.wordpress.org\u002Fnikostsolakos\u002F","\u003Ch3>Custom Preloader\u003C\u002Fh3>\n\u003Cp>Custom Preloader it’s a Plugin for making your Website More Cool! This plugin runs when your Website Loads and hiding the front page until your browser download the Page Perfectly.\u003C\u002Fp>\n\u003Cp>This Plugin it more for the Beauty of your Website! It’s hiding your front page until your objects set in their positions!\u003Cbr \u002F>\nCustom Preloader has A Simple Background and a ColorFul one! You gonna love it!\u003C\u002Fp>\n\u003Ch3>The Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Set Simple Background\u003C\u002Fli>\n\u003Cli>Set ColorFul Background\u003C\u002Fli>\n\u003Cli>Set Your Image\u003C\u002Fli>\n\u003Cli>Set Image Width – Height\u003C\u002Fli>\n\u003Cli>Set Margins Options\u003C\u002Fli>\n\u003Cli>Set Visibility\u003C\u002Fli>\n\u003Cli>Preview Mode\u003C\u002Fli>\n\u003Cli>Gradient Colors Generator installed\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Video\u003C\u002Fh3>\n\u003Cdiv class=\"embed-vimeo\" style=\"text-align: center;\">\u003Ciframe loading=\"lazy\" src=\"https:\u002F\u002Fplayer.vimeo.com\u002Fvideo\u002F253500226\" width=\"750\" height=\"422\" frameborder=\"0\" webkitallowfullscreen mozallowfullscreen allowfullscreen>\u003C\u002Fiframe>\u003C\u002Fdiv>\n\u003Ch3>Encourage Me\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fcustom-preloader\" rel=\"ugc\">Rate My Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>My Plugins\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frequired-fields\u002F\" rel=\"ugc\">Required Fields\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Thanks To\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>For The ColorFul Background Generator: \u003Ca href=\"https:\u002F\u002Fwww.twitter.com\u002FWebCoreIT\" rel=\"nofollow ugc\">@WebCoreIT\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","This Plugin it more for the Beauty of your Website! It's hiding your front page until your objects set in their positions! Custom Preloader has A &hellip;",90,15167,74,7,"2018-02-08T19:22:00.000Z","4.9.29","4.x",[93,19,94,95,96],"custom","image-loader","image-preloader","preloader","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustom-preloader\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-preloader.2.0.zip",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":87,"num_ratings":48,"last_updated":109,"tested_up_to":110,"requires_at_least":51,"requires_php":111,"tags":112,"homepage":115,"download_link":116,"security_score":47,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"image-preloading","Image Preloading","2.0.0","tiptinker","https:\u002F\u002Fprofiles.wordpress.org\u002Fsnowbedding\u002F","\u003Cp>Image Preloading is a powerful WordPress plugin that helps improve your website’s performance by preloading images in the background. This results in faster page loading experiences, especially beneficial for photo galleries, image-heavy sites, and e-commerce stores.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multiple Preloading Methods\u003C\u002Fstrong>: Choose between JavaScript preloading, modern Link preload headers, or both\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unlimited Image URLs\u003C\u002Fstrong>: Add as many images as you need\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Modern JavaScript\u003C\u002Fstrong>: Uses Promise-based loading with proper error handling\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Performance Optimized\u003C\u002Fstrong>: Only loads when needed and uses browser idle time when available\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security Focused\u003C\u002Fstrong>: Proper input sanitization and validation\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Admin Interface\u003C\u002Fstrong>: Clean, modern settings page integrated with WordPress admin\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Localization Ready\u003C\u002Fstrong>: Translation-ready with proper text domains\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Preloading Methods\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Cstrong>JavaScript Method\u003C\u002Fstrong>: Uses modern JavaScript with Promise-based image loading. Compatible with all browsers.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Link Preload\u003C\u002Fstrong>: Uses HTML \u003Ccode>\u003Clink rel=\"preload\">\u003C\u002Fcode> tags for modern browsers with native preloading support.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Both Methods\u003C\u002Fstrong>: Combines both approaches for maximum compatibility and performance.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Use Cases\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Photo galleries and portfolios\u003C\u002Fli>\n\u003Cli>E-commerce product images\u003C\u002Fli>\n\u003Cli>Hero banners and sliders\u003C\u002Fli>\n\u003Cli>Background images\u003C\u002Fli>\n\u003Cli>Any image-heavy content\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support, bug reports, or feature requests, please visit: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Ftiptinker\u002Fimage-preloading\" rel=\"nofollow ugc\">Github\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Contributing\u003C\u002Fh3>\n\u003Cp>Contributions are welcome! Please feel free to submit pull requests or open issues on GitHub.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later.\u003Cbr \u002F>\nLicense URI: https:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html\u003C\u002Fp>\n","Modern image preloading\u002Fprefetching plugin for WordPress to improve page loading performance.",50,3010,"2026-02-12T03:39:00.000Z","6.9.4","7.2",[19,113,22,23,114],"performance","speed","https:\u002F\u002Fgithub.com\u002Fsnowbedding\u002Fimage-preloading","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fimage-preloading.2.0.0.zip",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":125,"downloaded":126,"rating":127,"num_ratings":128,"last_updated":129,"tested_up_to":110,"requires_at_least":130,"requires_php":131,"tags":132,"homepage":136,"download_link":137,"security_score":138,"vuln_count":139,"unpatched_count":13,"last_vuln_date":140,"fetched_at":28},"autoptimize","Autoptimize","3.1.15","Optimizing Matters","https:\u002F\u002Fprofiles.wordpress.org\u002Foptimizingmatters\u002F","\u003Cp>Autoptimize makes optimizing your site really easy. It can aggregate, minify and cache scripts and styles, injects CSS in the page head by default but can also inline critical CSS and defer the aggregated full CSS, moves and defers scripts to the footer and minifies HTML. You can optimize and lazy-load images (with support for WebP and AVIF formats), optimize Google Fonts, async non-aggregated JavaScript, remove WordPress core emoji cruft and more. As such it can improve your site’s performance even when already on HTTP\u002F2! There is extensive API available to enable you to tailor Autoptimize to each and every site’s specific needs.\u003Cbr \u002F>\nIf you think performance indeed is important, you should at least consider one of the many free page caching plugins (e.g. \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fspeed-booster-pack\u002F\" rel=\"ugc\">Speed Booster pack\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcache-enabler\" rel=\"ugc\">KeyCDN’s Cache Enabler\u003C\u002Fa>) to complement Autoptimize or even \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=aopro\" rel=\"nofollow ugc\">consider Autoptimize Pro\u003C\u002Fa> which not only has page caching but also image optimization, CDN, critical CSS and more!\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Autoptimize Pro\u003C\u002Fstrong>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=aopro\" rel=\"nofollow ugc\">Autoptimize Pro is a premium Power-Up\u003C\u002Fa>, adding image optimization, CDN, page caching, automatic critical CSS rules and extra “booster” options, all in one handy subscription to \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=aopro\" rel=\"nofollow ugc\">make your site even faster!\u003C\u002Fa>!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Premium Support\u003C\u002Fstrong>\u003Cbr \u002F>\n  We provide great \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=autoptimizepro\" rel=\"nofollow ugc\">Premium Support and Web Performance Optimization services\u003C\u002Fa> with Accelera, check out our offering on \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=autoptimizepro\" rel=\"nofollow ugc\">https:\u002F\u002Faccelerawp.com\u002F\u003C\u002Fa>!\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>(Speed-surfing image under creative commons \u003Ca href=\"https:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Ftwistiti\u002F818552808\u002F\" rel=\"nofollow ugc\">by LL Twistiti\u003C\u002Fa>)\u003C\u002Fp>\n","Autoptimize speeds up your website by optimizing JS, CSS, images (incl. lazy-load), HTML and Google Fonts, asyncing JS, removing emoji cruft and more.",900000,42990793,94,1422,"2026-03-14T12:44:00.000Z","5.3","7.1",[133,134,135,21,113],"core-web-vitals","images","optimize","https:\u002F\u002Fautoptimize.com\u002Fpro\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fautoptimize.3.1.15.zip",77,10,"2025-12-03 00:32:37",{"attackSurface":142,"codeSignals":162,"taintFlows":175,"riskAssessment":176,"analyzedAt":183},{"hooks":143,"ajaxHandlers":158,"restRoutes":159,"shortcodes":160,"cronEvents":161,"entryPointCount":13,"unprotectedCount":13},[144,150,154],{"type":145,"name":146,"callback":147,"file":148,"line":149},"action","wp_head","preload_featured_image","preload-featured-image.php",19,{"type":145,"name":151,"callback":152,"file":148,"line":153},"admin_menu","preload_featured_image_menu",33,{"type":145,"name":155,"callback":156,"file":148,"line":157},"admin_init","preload_featured_image_register_settings",61,[],[],[],[],{"dangerousFunctions":163,"sqlUsage":164,"outputEscaping":166,"fileOperations":13,"externalRequests":13,"nonceChecks":13,"capabilityChecks":32,"bundledLibraries":174},[],{"prepared":13,"raw":13,"locations":165},[],{"escaped":167,"rawEcho":168,"locations":169},5,2,[170,173],{"file":148,"line":171,"context":172},81,"raw output",{"file":148,"line":85,"context":172},[],[],{"summary":177,"deductions":178},"The \"preload-featured-image\" plugin version 1.1 exhibits a strong security posture based on the provided static analysis. The absence of any identified attack surface points, such as unprotected AJAX handlers, REST API routes, or shortcodes, is a significant positive. The code also demonstrates good security practices by exclusively using prepared statements for SQL queries and having no file operations or external HTTP requests, which minimizes common web application vulnerabilities.  The presence of capability checks, even if only one is noted, is also a good sign of intentional access control.\n\nHowever, a notable concern is the 29% of output that is not properly escaped. While the plugin doesn't present overt critical or high-severity risks through taint analysis or known CVEs, unescaped output can still lead to Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is not handled carefully before being rendered.  Furthermore, the lack of nonce checks, while not explicitly tied to an attack vector in this analysis, can be a weakness that, in conjunction with other factors, could be exploited in more complex scenarios. The plugin's history of zero vulnerabilities is a positive indicator of its development quality, but it's crucial to address the identified output escaping issue.\n\nIn conclusion, \"preload-featured-image\" v1.1 is generally secure due to its limited attack surface and robust data handling for SQL. The primary area for improvement is ensuring all output is properly escaped to prevent potential XSS vulnerabilities. The plugin's clean vulnerability history is a testament to its good development, but vigilance regarding output sanitization remains important.",[179,181],{"reason":180,"points":167},"Unescaped output detected",{"reason":182,"points":48},"No nonce checks detected","2026-03-16T22:05:58.085Z",{"wat":185,"direct":190},{"assetPaths":186,"generatorPatterns":187,"scriptPaths":188,"versionParams":189},[],[],[],[],{"cssClasses":191,"htmlComments":192,"htmlAttributes":193,"restEndpoints":194,"jsGlobals":195,"shortcodeOutput":196},[],[],[],[],[],[197],"\u003Clink rel=\"preload\" href=\""]