[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkx2fKjTyEoF3e8-hST5r11-nGHCvdc0EiQj6CU-oJzA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":37,"analysis":141,"fingerprints":270},"simple-webp-images","Simple Webp Images","2.0.0","Mike Bricknell-Barlow","https:\u002F\u002Fprofiles.wordpress.org\u002Fmikebricknellbarlow\u002F","\u003Cp>This plugin helps to increase site speed, and helps to improve scores in Google’s Pagespeed Insights tool by addressing the common recommendation “Serve next-gen image formats”.\u003C\u002Fp>\n\u003Cp>For the best speeds, Google recommends using new image formats such as .webp, which offer smaller file sizes than common formats such as .jpg or .png with no visible loss in quality. However, not all internet browsers support the .wepb image format, so only using that format would result in broken images in older browsers.\u003C\u002Fp>\n\u003Cp>This plugin addresses that problem, and allows your site to use .webp images when it can. This plugin will convert images from .jpg or .png automatically, and save .webp versions of the image alongside the original. When a user visits the site in a compatible browser, they will be shown the .webp versions of all images, making your site load faster and improving your scores in Google Pagespeed Insights. Users on older browsers that aren’t compatible with .webp images will be shown the .jpg or .png versions of the images instead.\u003C\u002Fp>\n\u003Cp>When first installing the plugin, run the Bulk Converter to convert all your existing images. See the Installation section for instructions.\u003C\u002Fp>\n\u003Cp>After installation, any .jpg or .png image uploaded to the Media Library will be automatically converted.\u003C\u002Fp>\n\u003Ch3>Settings\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>Conversion quality – Controls the level of compression on the generated .webp images. The lower the value, the smaller the file size of the generated images, but the more chance there is of a visual degradation of quality. The quality value to be entered is a percentage – by default, this is set at 80%. Most users won’t need to change this.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>HTML Output Buffering – This allows the plugin to perform a find-and-replace on the HTML that WordPress has generated for output to the browser to replace image tags. This tends to perform the image tag replacement more reliably, but can cause issues with some themes. Users are advised to have this setting turned on, but they should check that the site is displaying as it should, and turn this option off if any issues arise.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Exclude pages from HTML output buffering – To specify pages that should be excluded from the HTML Output Buffering settings\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Lazy loading – This improves the site speed further by not loading images that are further down the page until the user has scrolled down to them. This saves time downloading images that the user hasn’t got to yet, or might not get to at all. Users are advised to have this setting turned on, but they should check that the site is displaying as it should, and turn this option off if any issues arise.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Exclude image classes from lazy-loading – To specify images, by class name, that should not have the lazy-loading applied\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Developers\u003C\u002Fh3>\n\u003Cp>If using Simple Webp Images with your custom themes or plugins, there’s a couple of filters you can use, as below.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>simple-webp-images-exclude-from-output-buffering\u003C\u002Fcode> filter\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Use this to exclude pages or posts from the HTML output buffering via \u003Ccode>apply_filters\u003C\u002Fcode>, using any critera you need. Call the filter, run any checks you need, and return ‘true’ to exclude the current page or post from the buffering.\u003Cbr \u002F>\nExample:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>apply_filters( 'simple-webp-images-exclude-from-output-buffering', 'exclude_page_with_id_100_from_output_buffering' );\nfunction exclude_page_with_id_100_from_output_buffering( $is_excluded ) {\n    if( get_the_id() == 100 ) {\n        return true;\n    }\n\n    return false;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The example code could be placed in your \u003Ccode>functions.php\u003C\u002Fcode> file.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>simple-webp-images-exclude-from-lazy-loading\u003C\u002Fcode> filter\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Use this to exclude pages or posts from the image lazy loading via \u003Ccode>apply_filters\u003C\u002Fcode>, using any critera you need. Call the filter, run any checks you need, and return ‘true’ to exclude the current page or post from the lazy loading.\u003Cbr \u002F>\nExample:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>apply_filters( 'simple-webp-images-exclude-from-lazy-loading', 'exclude_page_with_id_100_from_lazy_loading' );\nfunction exclude_page_with_id_100_from_lazy_loading( $is_excluded ) {\n    if( get_the_id() == 100 ) {\n        return true;\n    }\n\n    return false;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The example code could be placed in your \u003Ccode>functions.php\u003C\u002Fcode> file.\u003C\u002Fp>\n","Generates webp images from uploaded images, and outputs webp images in content in compatible browsers. Optionally provides lazy-load functionality.",30,7155,74,3,"2024-04-14T13:07:00.000Z","6.5.8","5.0.0","8.0",[20,21,22,23,24],"conversion","images","pagespeed","speed","webp","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsimple-webp-images.zip",92,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":11,"trust_score":35,"computed_at":36},"mikebricknellbarlow",1,88,"2026-04-05T15:24:21.718Z",[38,63,85,103,120],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":58,"download_link":59,"security_score":60,"vuln_count":61,"unpatched_count":28,"last_vuln_date":62,"fetched_at":30},"autoptimize","Autoptimize","3.1.15","Optimizing Matters","https:\u002F\u002Fprofiles.wordpress.org\u002Foptimizingmatters\u002F","\u003Cp>Autoptimize makes optimizing your site really easy. It can aggregate, minify and cache scripts and styles, injects CSS in the page head by default but can also inline critical CSS and defer the aggregated full CSS, moves and defers scripts to the footer and minifies HTML. You can optimize and lazy-load images (with support for WebP and AVIF formats), optimize Google Fonts, async non-aggregated JavaScript, remove WordPress core emoji cruft and more. As such it can improve your site’s performance even when already on HTTP\u002F2! There is extensive API available to enable you to tailor Autoptimize to each and every site’s specific needs.\u003Cbr \u002F>\nIf you think performance indeed is important, you should at least consider one of the many free page caching plugins (e.g. \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fspeed-booster-pack\u002F\" rel=\"ugc\">Speed Booster pack\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcache-enabler\" rel=\"ugc\">KeyCDN’s Cache Enabler\u003C\u002Fa>) to complement Autoptimize or even \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=aopro\" rel=\"nofollow ugc\">consider Autoptimize Pro\u003C\u002Fa> which not only has page caching but also image optimization, CDN, critical CSS and more!\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Autoptimize Pro\u003C\u002Fstrong>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=aopro\" rel=\"nofollow ugc\">Autoptimize Pro is a premium Power-Up\u003C\u002Fa>, adding image optimization, CDN, page caching, automatic critical CSS rules and extra “booster” options, all in one handy subscription to \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=aopro\" rel=\"nofollow ugc\">make your site even faster!\u003C\u002Fa>!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Premium Support\u003C\u002Fstrong>\u003Cbr \u002F>\n  We provide great \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=autoptimizepro\" rel=\"nofollow ugc\">Premium Support and Web Performance Optimization services\u003C\u002Fa> with Accelera, check out our offering on \u003Ca href=\"https:\u002F\u002Fmisc.optimizingmatters.com\u002Fpartners\u002F?from=partnertab&partner=autoptimizepro\" rel=\"nofollow ugc\">https:\u002F\u002Faccelerawp.com\u002F\u003C\u002Fa>!\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>(Speed-surfing image under creative commons \u003Ca href=\"https:\u002F\u002Fwww.flickr.com\u002Fphotos\u002Ftwistiti\u002F818552808\u002F\" rel=\"nofollow ugc\">by LL Twistiti\u003C\u002Fa>)\u003C\u002Fp>\n","Autoptimize speeds up your website by optimizing JS, CSS, images (incl. lazy-load), HTML and Google Fonts, asyncing JS, removing emoji cruft and more.",900000,42990793,94,1422,"2026-03-14T12:44:00.000Z","6.9.4","5.3","7.1",[55,21,56,22,57],"core-web-vitals","optimize","performance","https:\u002F\u002Fautoptimize.com\u002Fpro\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fautoptimize.3.1.15.zip",77,12,"2026-03-20 00:00:00",{"slug":64,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":73,"num_ratings":14,"last_updated":74,"tested_up_to":75,"requires_at_least":76,"requires_php":77,"tags":78,"homepage":83,"download_link":84,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"preload-featured-images","Preload Featured Images","1.0.0","WPZOOM","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpzoom\u002F","\u003Cp>Preload Featured Images automatically in posts to increase the PageSpeed Score.\u003C\u002Fp>\n\u003Cp>This plugin is a “must-have” for websites using themes that display the Featured Image automatically at the top in single post pages.\u003C\u002Fp>\n\u003Ch3>Why was this plugin created?\u003C\u002Fh3>\n\u003Cp>Suppose your theme displays the Featured Image at the top in posts automatically. In that case, the chances that the image is the \u003Cstrong>LCP (Largest Contentful Paint)\u003C\u002Fstrong> are very high, so the PageSpeed tool will highly recommend you to preload it.\u003C\u002Fp>\n\u003Cp>Are you getting the following recommendation when testing the PageSpeed score of a single post: \u003Cstrong>“Preload Largest Contentful Paint image”\u003C\u002Fstrong>? Then this plugin will help you!\u003C\u002Fp>\n\u003Ch3>How it works?\u003C\u002Fh3>\n\u003Cp>Go to the \u003Cstrong>Settings > Preload Featured Images\u003C\u002Fstrong> page and choose the image size used by your theme to make sure the right image size is preloaded.\u003C\u002Fp>\n\u003Ch3>Compatible Themes\u003C\u002Fh3>\n\u003Cp>The plugin supports all themes, but it’s very important to choose the right Image Size on the settings page.\u003C\u002Fp>\n\u003Cp>If you are not sure which is the image size used by your theme, simply get in touch with your theme’s developer and they will be able to help you with that.\u003C\u002Fp>\n\u003Cp>If you’re using one of the following popular themes, then the plugin will automatically pick the right Image Size, so you don’t have to configure anything:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Foodica\u003C\u002Fli>\n\u003Cli>Foodica PRO\u003C\u002Fli>\n\u003Cli>Gourmand\u003C\u002Fli>\n\u003Cli>Cookely\u003C\u002Fli>\n\u003Cli>Astra\u003C\u002Fli>\n\u003Cli>Neve\u003C\u002Fli>\n\u003Cli>OceanWP\u003C\u002Fli>\n\u003Cli>GeneratePress\u003C\u002Fli>\n\u003Cli>BlossomRecipe\u003C\u002Fli>\n\u003Cli>Divi\u003C\u002Fli>\n\u003Cli>Ashe\u003C\u002Fli>\n\u003C\u002Ful>\n","Preload Featured Images automatically in posts to increase the PageSpeed Score.",2000,17991,100,"2024-07-17T13:40:00.000Z","6.6.5","5.0","7.4",[79,80,22,81,82],"featured-images","image-preload","prefetch","preload","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpreload-featured-images\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpreload-featured-images.zip",{"slug":86,"name":87,"version":88,"author":89,"author_profile":90,"description":91,"short_description":92,"active_installs":93,"downloaded":94,"rating":95,"num_ratings":96,"last_updated":97,"tested_up_to":98,"requires_at_least":76,"requires_php":52,"tags":99,"homepage":25,"download_link":101,"security_score":102,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"specify-missing-image-dimensions","Specify Missing Image Dimensions","1.0.2","yasir129","https:\u002F\u002Fprofiles.wordpress.org\u002Fyasir129\u002F","\u003Cp>\u003Cstrong>Specify Missing Image Dimensions\u003C\u002Fstrong> is a WordPress plugin that helps to add missing width and height attributes to images. This plugin scans the entire HTML page and specify missing width and height to  tags.\u003C\u002Fp>\n\u003Cp>If you are seeing error like “Image elements do not have explicit width and height” on \u003Ca href=\"https:\u002F\u002Fdevelopers.google.com\u002Fspeed\u002Fpagespeed\u002Finsights\u002F\" rel=\"nofollow ugc\">Google PageSpeed Insights\u003C\u002Fa> then this plugin will help you to remove that error by adding missing width and height attributes to the required images.\u003C\u002Fp>\n\u003Cp>By adding width and height to the images, Cumulative Layout Shift (CLS) also improves as there will be no more unwanted jumps while HTML page rendering.\u003C\u002Fp>\n\u003Ch3>How this Plugin Works\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\u003Cstrong>Specify Missing Image Dimensions\u003C\u002Fstrong> plugin scans the entire HTML page and finds images with missing width and height attributes.\u003C\u002Fli>\n\u003Cli>After finding the images, this plugin gets the image dimensions using getimagesize() function.\u003C\u002Fli>\n\u003Cli>After getting the required dimensions, plugin adds the width and height attributes to the images.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Exclude images by image extension\u003C\u002Fli>\n\u003Cli>Exclude images by image Name\u003C\u002Fli>\n\u003Cli>Exclude images by class\u003C\u002Fli>\n\u003Cli>Exclude images by ID\u003C\u002Fli>\n\u003C\u002Ful>\n","This plugin helps to add missing width and height attributes to images.",1000,15281,90,11,"2022-05-29T18:20:00.000Z","6.0.11",[100,21,56,22,23],"image-optimization","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fspecify-missing-image-dimensions.zip",85,{"slug":104,"name":105,"version":106,"author":107,"author_profile":108,"description":109,"short_description":110,"active_installs":111,"downloaded":112,"rating":73,"num_ratings":34,"last_updated":113,"tested_up_to":114,"requires_at_least":115,"requires_php":116,"tags":117,"homepage":25,"download_link":119,"security_score":102,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"webp-express-plus","WebP Express Plus","0.2.1","WP01","https:\u002F\u002Fprofiles.wordpress.org\u002Fwp01ru\u002F","\u003Cp>WebP Express Plus eliminates the necessary images and folders with graphics from processing using the “WebP Express” plugin. Works ONLY in combination with “WebP Express” by Bjørn Rosell.\u003C\u002Fp>\n\u003Ch3>WebP Express Plus – an important improvement!\u003C\u002Fh3>\n\u003Cp>Slider (or other element) the site stopped working after connecting WebP using the “WebP Express” plugin? Don’t want to lose the quality of some photos when using WebP format for them? Our add-on will help you solve these problems!\u003C\u002Fp>\n\u003Ch4>Important\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>The “WebP Express Plus” add-on only works when the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwebp-express\u002F\" rel=\"ugc\">“WebP Express”\u003C\u002Fa> plugin is active and properly configured.\u003C\u002Fli>\n\u003Cli>You must specify the path to the original jpg \u002F png files.\u003C\u002Fli>\n\u003Cli>New line = new path to the photo and \u002F or photo folder.\u003C\u002Fli>\n\u003Cli>The indication must start with”\u002F”, for example: \u002Fwp-content\u002Fuploads\u002F2021\u002F05\u002Fpic1.jpg\u003C\u002Fli>\n\u003Cli>The path to the graphics folder must end with “\u002F”, for example: \u002Fwp-content\u002Fuploads\u002F2021\u002F05\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Opportunities:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Excluding individual images\u003C\u002Fli>\n\u003Cli>Excluding entire folders with graphics\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Conveniences:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Very simple interface\u003C\u002Fli>\n\u003Cli>There are hints – everything is very simple!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Language\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Russian\u003C\u002Fli>\n\u003Cli>English\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Notes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>The performance was tested with different settings of “WebP Express”. If you notice incorrect operation of “WebP Express Plus” – write to us at support@wp01.ru with an indication of all installed plugins and the problem that occurred.\u003C\u002Fli>\n\u003Cli>The “WebP Express Plus” plugin uses the features of the “PHP Simple HTML DOM Parser” version 1.9.1 HTML parser. Please note the product features and compatibility.\u003C\u002Fli>\n\u003C\u002Ful>\n","Exclusion of necessary images from processing by the \"WebP Express\" plugin",800,8698,"2022-11-24T12:13:00.000Z","6.1.10","4.0","5.6",[21,57,23,24,118],"webp-express","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwebp-express-plus.zip",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":73,"downloaded":128,"rating":35,"num_ratings":129,"last_updated":130,"tested_up_to":131,"requires_at_least":132,"requires_php":133,"tags":134,"homepage":139,"download_link":140,"security_score":102,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"opti-mozjpeg-guetzli-webp","Opti MozJpeg Guetzli WebP","1.16","ihorsl","https:\u002F\u002Fprofiles.wordpress.org\u002Fihorsl\u002F","\u003Cp>WordPress Opti MozJpeg Guetzli WebP – is the FREE plugin for high quality image optimization in WordPress website. It was created to meet latest requirements of Google Pagespeed Insights. Google will “like” all your images after using this plugin, and you will expend $0 for that.\u003C\u002Fp>\n\u003Cp>This plugin uses flowing image encoders: Mozilla MozJpeg, Google Guetzli and Google WebP. But don’t worry. There is no necessity to install them into your hosting. The plugin has built-in ssh client. It can access encoders remotely via ssh tunnel.\u003C\u002Fp>\n\u003Cp>Plugin’s author created a virtual machine for Oracle VirtualBox. It contains Linux, ssh server and Mozilla MozJpeg, Google Guetzli and Google WebP. Simply run this virtual machine in your computer, establish ssh connection between the plugin and the virtual machine and optimize your images for free without any limitations.\u003C\u002Fp>\n\u003Cp>Of course the plugin can use locally installed encoders too.\u003C\u002Fp>\n\u003Cp>The plugin can create webp duplicates for all your images and serve them to webp compatible browsers. Lately Google Pagespeed changed the rules of the game. It wants now all images to be smaller then webp with quality 75 + 10%. And this plugin can do it for you.\u003C\u002Fp>\n\u003Cp>The plugin can convert non alpha png images into jpeg. Automatically generates thumbnails and cleans not used thumbnail files.\u003C\u002Fp>\n\u003Cp>All your images will be backed up before changing. You can run batch optimization many times, experiment with settings. And every time original images will be used as source. No quality degradation.\u003C\u002Fp>\n\u003Cp>There is also the ability “Revert everything”. It can bring back the initial state of your images. All your images will be the same, as they were before this plugin use.\u003C\u002Fp>\n\u003Cp>Please read \u003Ca href=\"http:\u002F\u002Fihorsl.com\u002Fen\u002Fwordpress-opti-mozjpeg-guetzli-webp\u002Fbrief-man\u002F\" rel=\"nofollow ugc\">this brief manual\u003C\u002Fa>, before using the plugin.\u003C\u002Fp>\n\u003Cp>The virtual machine with encoders is \u003Ca href=\"http:\u002F\u002Fihorsl.com\u002Fredirect.php?t=wpmjgu-vm\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>If you have difficulties with use of the virtual machine in your computer, you may try the plugin author’s free online server. \u003Ca href=\"http:\u002F\u002Fihorsl.com\u002Fen\u002Fwordpress-opti-mozjpeg-guetzli-webp\u002Ffree-server\u002F\" rel=\"nofollow ugc\">Click here\u003C\u002Fa> to read more.\u003C\u002Fp>\n","WordPress Opti MozJpeg Guetzli WebP - is the FREE plugin for high quality image optimization in WordPress website. It was created to meet latest requi …",7175,7,"2018-07-31T18:22:00.000Z","4.9.29","4.7","5.4",[135,22,136,137,138],"free-image-optimization","pingdom","seo","wordpress-images-optimization","https:\u002F\u002Fihorsl.com\u002Fen\u002Fwordpress-opti-mozjpeg-guetzli-webp\u002Fhome\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fopti-mozjpeg-guetzli-webp.1.16.zip",{"attackSurface":142,"codeSignals":207,"taintFlows":228,"riskAssessment":255,"analyzedAt":269},{"hooks":143,"ajaxHandlers":192,"restRoutes":203,"shortcodes":204,"cronEvents":205,"entryPointCount":206,"unprotectedCount":206},[144,150,154,156,159,163,167,170,175,179,183,185,188],{"type":145,"name":146,"callback":147,"file":148,"line":149},"action","init","set_plugin_url","classes\\class-simple-webp-images-admin.php",9,{"type":145,"name":151,"callback":152,"file":148,"line":153},"admin_menu","register_admin_menu_page",10,{"type":145,"name":155,"callback":152,"file":148,"line":96},"register_settings",{"type":145,"name":157,"callback":158,"file":148,"line":61},"admin_post_update_settings","update_settings",{"type":145,"name":160,"callback":161,"file":148,"line":162},"admin_enqueue_scripts","enqueue_admin_assets",13,{"type":145,"name":164,"callback":165,"file":148,"line":166},"show_pre_plugin_messages","display_wordfence_message",16,{"type":145,"name":164,"callback":168,"file":148,"line":169},"display_gd_extension_message",17,{"type":171,"name":172,"callback":173,"file":174,"line":61},"filter","final_output","wrap_img_tags_with_picture_element","classes\\class-simple-webp-images-html.php",{"type":171,"name":176,"callback":173,"priority":177,"file":174,"line":178},"the_content",20,14,{"type":171,"name":180,"callback":181,"priority":153,"file":182,"line":162},"wp_generate_attachment_metadata","generate_webp_on_resize","classes\\class-simple-webp-images.php",{"type":145,"name":146,"callback":147,"file":182,"line":184},15,{"type":145,"name":186,"callback":187,"file":182,"line":166},"delete_attachment","delete_webp_on_media_deletion",{"type":145,"name":189,"callback":190,"priority":28,"file":191,"line":162},"shutdown","closure","mu-plugins\\output_buffering.php",[193,197,199,201],{"action":194,"nopriv":195,"callback":196,"hasNonce":195,"hasCapCheck":195,"file":148,"line":178},"get_total_images",false,"get_all_images",{"action":198,"nopriv":195,"callback":198,"hasNonce":195,"hasCapCheck":195,"file":148,"line":184},"bulk_convert_images",{"action":200,"nopriv":195,"callback":200,"hasNonce":195,"hasCapCheck":195,"file":174,"line":149},"output_single_convert_link",{"action":202,"nopriv":195,"callback":202,"hasNonce":195,"hasCapCheck":195,"file":182,"line":169},"convert_single_attachment",[],[],[],4,{"dangerousFunctions":208,"sqlUsage":209,"outputEscaping":211,"fileOperations":28,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":227},[],{"prepared":28,"raw":28,"locations":210},[],{"escaped":212,"rawEcho":213,"locations":214},39,6,[215,218,220,222,224,225],{"file":148,"line":216,"context":217},260,"raw output",{"file":191,"line":219,"context":217},22,{"file":221,"line":213,"context":217},"templates\\template-admin-menu-page.php",{"file":221,"line":223,"context":217},53,{"file":221,"line":223,"context":217},{"file":221,"line":226,"context":217},54,[],[229,247],{"entryPoint":230,"graph":231,"unsanitizedCount":34,"severity":246},"update_settings (classes\\class-simple-webp-images-admin.php:152)",{"nodes":232,"edges":244},[233,238],{"id":234,"type":235,"label":236,"file":148,"line":237},"n0","source","$_POST",163,{"id":239,"type":240,"label":241,"file":148,"line":242,"wp_function":243},"n1","sink","update_option() [Settings Manipulation]",168,"update_option",[245],{"from":234,"to":239,"sanitized":195},"low",{"entryPoint":248,"graph":249,"unsanitizedCount":34,"severity":246},"\u003Cclass-simple-webp-images-admin> (classes\\class-simple-webp-images-admin.php:0)",{"nodes":250,"edges":253},[251,252],{"id":234,"type":235,"label":236,"file":148,"line":237},{"id":239,"type":240,"label":241,"file":148,"line":242,"wp_function":243},[254],{"from":234,"to":239,"sanitized":195},{"summary":256,"deductions":257},"The \"simple-webp-images\" v2.0.0 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by using prepared statements for all SQL queries and a high percentage of properly escaped output. There are no known vulnerabilities (CVEs) recorded for this plugin, and it does not perform file operations or external HTTP requests, which reduces certain common attack vectors. However, a significant concern arises from the attack surface analysis, which reveals four AJAX handlers, all of which lack authentication checks. This is a substantial security weakness as it allows any user, regardless of their role or permissions, to trigger these handlers, potentially leading to unintended actions or information disclosure.\n\nThe taint analysis indicates two flows with unsanitized paths. While categorized as not critical or high severity in this analysis, unsanitized paths are a direct indicator of potential vulnerabilities. Combined with the unprotected AJAX handlers, these flows represent a tangible risk. The absence of nonce checks on these AJAX handlers further exacerbates the risk, making them susceptible to Cross-Site Request Forgery (CSRF) attacks. The plugin's history of zero vulnerabilities is encouraging, but it doesn't negate the immediate risks identified in the static analysis. The lack of capability checks on AJAX handlers also means that actions performed via these handlers are not restricted by user roles, increasing the potential impact of any exploit.",[258,260,263,265,267],{"reason":259,"points":153},"Unprotected AJAX handlers (4)",{"reason":261,"points":262},"Missing nonce checks on AJAX",5,{"reason":264,"points":262},"Missing capability checks on AJAX",{"reason":266,"points":206},"Flows with unsanitized paths (2)",{"reason":268,"points":14},"Low percentage of properly escaped output (87%)","2026-03-16T22:38:31.926Z",{"wat":271,"direct":284},{"assetPaths":272,"generatorPatterns":277,"scriptPaths":278,"versionParams":279},[273,274,275,276],"\u002Fwp-content\u002Fplugins\u002Fsimple-webp-images\u002Fdist\u002Fscripts\u002Fselectric.js","\u002Fwp-content\u002Fplugins\u002Fsimple-webp-images\u002Fdist\u002Fscripts\u002Fadmin-scripts.js","\u002Fwp-content\u002Fplugins\u002Fsimple-webp-images\u002Fdist\u002Fstyles\u002Fselectric.css","\u002Fwp-content\u002Fplugins\u002Fsimple-webp-images\u002Fdist\u002Fstyles\u002Fadmin-styles.css",[],[273,274],[280,281,282,283],"simple-webp-images\u002Fdist\u002Fscripts\u002Fselectric.js?ver=","simple-webp-images\u002Fdist\u002Fscripts\u002Fadmin-scripts.js?ver=","simple-webp-images\u002Fdist\u002Fstyles\u002Fselectric.css?ver=","simple-webp-images\u002Fdist\u002Fstyles\u002Fadmin-styles.css?ver=",{"cssClasses":285,"htmlComments":286,"htmlAttributes":287,"restEndpoints":288,"jsGlobals":289,"shortcodeOutput":292},[],[],[],[],[290,291],"simple_webp_images_selectric","simple_webp_images_admin_scripts",[]]