Preload LCP Image Security & Risk Analysis

wordpress.org/plugins/preload-lcp-image

Allows you to specify on individual pages or posts the Largest Contentful Paint (LCP) Image on that page to preload, making the page load quicker.

4K active installs v1.5.1 PHP 8.0+ WP 6.1.2+ Updated Dec 11, 2025
largest-contentful-paintlcppreloadsite-optimisationsite-speed
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Preload LCP Image Safe to Use in 2026?

Generally Safe

Score 100/100

Preload LCP Image has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "preload-lcp-image" plugin, version 1.5.1, exhibits a very strong security posture based on the provided static analysis and vulnerability history. The absence of any identified vulnerabilities in its history, coupled with a clean code scan showing no dangerous functions, raw SQL queries, or file operations, indicates a well-developed and secure plugin. The code signals further reinforce this, with a high percentage of output properly escaped, a nonce check present, and no indications of taint flows. The limited attack surface with no unprotected entry points is also a significant positive indicator. Overall, this plugin appears to be highly secure and well-maintained, with no immediate security concerns identified from the provided data.

Vulnerabilities
None known

Preload LCP Image Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Preload LCP Image Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
54 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

95% escaped57 total outputs
Attack Surface

Preload LCP Image Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 10
actionadmin_enqueue_scriptsinc\admin-enqueue.php:9
actionwp_headinc\display.php:206
actionadmin_enqueue_scriptsinc\enqueue.php:35
actionadd_meta_boxesinc\metabox.php:20
actionsave_postinc\metabox.php:189
actionadmin_menuinc\options.php:12
actionadmin_initinc\options.php:49
actionadmin_initinc\taxonomy-metabox.php:17
actioncreated_terminc\taxonomy-metabox.php:182
actionedited_terminc\taxonomy-metabox.php:183
Maintenance & Trust

Preload LCP Image Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 11, 2025
PHP min version8.0
Downloads40K

Community Trust

Rating96/100
Number of ratings5
Active installs4K
Developer Profile

Preload LCP Image Developer Profile

Rhys Wynne

13 plugins · 7K total installs

74
trust score
Avg Security Score
93/100
Avg Patch Time
476 days
View full developer profile
Detection Fingerprints

How We Detect Preload LCP Image

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/preload-lcp-image/inc/css/admin-style.css
Script Paths
/wp-content/plugins/preload-lcp-image/inc/js/upload-media.js
Version Parameters
preload-lcp-image/inc/css/admin-style.css?ver=preload-lcp-admin-script?ver=

HTML / DOM Fingerprints

JS Globals
preload_lcp
FAQ

Frequently Asked Questions about Preload LCP Image