SNY Auto Featured Image Security & Risk Analysis

wordpress.org/plugins/wp-auto-featured-image

Automatically set a default featured image for posts, pages, or custom post types when none is assigned.

1K active installs v2.0.3 PHP 7.4+ WP 3.5+ Updated Jan 24, 2026
automaticcustom-post-typedefault-featured-imagefeatured-imagethumbnails
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is SNY Auto Featured Image Safe to Use in 2026?

Generally Safe

Score 100/100

SNY Auto Featured Image has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "wp-auto-featured-image" v2.0.3 plugin exhibits a strong security posture based on the provided static analysis. There are no identified AJAX handlers, REST API routes, shortcodes, or cron events, resulting in zero attack surface and zero unprotected entry points. The code also avoids dangerous functions, file operations, and external HTTP requests, which are common vectors for vulnerabilities. Crucially, all SQL queries utilize prepared statements, and there are no identified taint flows or unsanitized paths. The presence of nonce and capability checks further reinforces its secure development practices.

Key Concerns

  • Outputs with potential for unescaped data
Vulnerabilities
None known

SNY Auto Featured Image Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

SNY Auto Featured Image Release Timeline

v2.0.3Current
v2.0.2
v2.0.1
v2.0
v1.5.1
v1.5
v1.4
v1.3
v1.2
v1.1
v1.0
Code Analysis
Analyzed Mar 16, 2026

SNY Auto Featured Image Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
20 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

83% escaped24 total outputs
Attack Surface

SNY Auto Featured Image Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionadmin_enqueue_scriptsadmin\class-wpafi-admin.php:19
actionsave_postadmin\class-wpafi-admin.php:20
actionadmin_menuadmin\class-wpafi-admin.php:21
actionadmin_noticesadmin\class-wpafi-review-notice.php:27
actionadmin_initadmin\class-wpafi-review-notice.php:28
actionadmin_headadmin\class-wpafi-review-notice.php:29
actionadmin_initadmin\class-wpafi-settings.php:22
Maintenance & Trust

SNY Auto Featured Image Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 24, 2026
PHP min version7.4
Downloads48K

Community Trust

Rating82/100
Number of ratings9
Active installs1K
Developer Profile

SNY Auto Featured Image Developer Profile

Sanny Srivastava

1 plugin · 1K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect SNY Auto Featured Image

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-auto-featured-image/css/wpafi-style.css/wp-content/plugins/wp-auto-featured-image/js/wpafi-script.js
Script Paths
https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/css/select2.min.csshttps://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/js/select2.min.js
Version Parameters
wp-auto-featured-image/css/wpafi-style.css?ver=wp-auto-featured-image/js/wpafi-script.js?ver=

HTML / DOM Fingerprints

Data Attributes
data-upload_button_textdata-delete_button_text
JS Globals
wpafi_vars
FAQ

Frequently Asked Questions about SNY Auto Featured Image