SmartCrop Security & Risk Analysis

wordpress.org/plugins/smartcrop

Instead of cropping to the center of an image, SmartCrop attempts to use the most interesting part of the image for the thumbnail.

40 active installs v1.0.0 PHP 5.4+ WP 3.5+ Updated Feb 19, 2018
cropthumbnailthumbnails
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is SmartCrop Safe to Use in 2026?

Generally Safe

Score 85/100

SmartCrop has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The smartcrop v1.0.0 plugin exhibits a strong security posture based on the provided static analysis. It demonstrates excellent adherence to secure coding practices by implementing prepared statements for all SQL queries and ensuring 100% of its outputs are properly escaped. The absence of file operations and external HTTP requests further minimizes its attack surface. Notably, the plugin has no recorded vulnerabilities, including CVEs, which suggests a history of diligent security maintenance or a lack of identified weaknesses to date. The identified zero attack surface points, particularly zero unprotected entry points, are highly positive indicators of secure design.

Vulnerabilities
None known

SmartCrop Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

SmartCrop Release Timeline

v1.0.0Current
Code Analysis
Analyzed Mar 16, 2026

SmartCrop Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

SmartCrop Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 5
filterimage_resize_dimensionsincludes\trait-smartcrop-wp-image-editor-common.php:94
filterwp_image_editorssmartcrop.php:96
filterwp_generate_attachment_metadatasmartcrop.php:97
actionsmartcrop_process_thumbnailsmartcrop.php:98
actioninitsmartcrop.php:244

Scheduled Events 1

smartcrop_process_thumbnail
Maintenance & Trust

SmartCrop Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedFeb 19, 2018
PHP min version5.4
Downloads2K

Community Trust

Rating100/100
Number of ratings1
Active installs40
Developer Profile

SmartCrop Developer Profile

Alex Mills

5 plugins · 1.0M total installs

73
trust score
Avg Security Score
92/100
Avg Patch Time
1675 days
View full developer profile
Detection Fingerprints

How We Detect SmartCrop

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about SmartCrop