How many vulnerabilities does W3ctrl Smart Image Optimizer have?

The audit found 202 findings: 0 critical, 3 high, 32 medium severity.

Should I use W3ctrl Smart Image Optimizer?

Based on the latest audit (grade B, risk HIGH), review the 202 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

W3ctrl Smart Image Optimizer

Q: Is W3ctrl Smart Image Optimizer secure?

WP HealthKit's independent audit rates W3ctrl Smart Image Optimizer overall risk as HIGH with a report-card grade of B.

Audited at release

v1.0.3WordPress PluginAudited 5 days ago

Optimize JPEG, PNG, and WebP locally. Resize, WebP/AVIF, backups, bulk processing, and WP-CLI — no remote API.

HIGH

Total Findings

202

Security Grade

Security Findings

202

Critical0

High3

Medium32

Low10

Info157

Executive Summary

Is W3ctrl Smart Image Optimizer secure? In WP HealthKit's independent 2026 audit, W3ctrl Smart Image Optimizer received an overall risk of HIGH and a report-card grade of B across 202 findings (0 critical, 3 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityDatabaseGDPRType SafetyHook WiringAccessibilityPlugin LifecycleSecurityCoding StandardsTheme StandardsUpdate SafetyWordPress CompatibilityPerformancecompatibilityDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![W3ctrl Smart Image Optimizer security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/w3ctrl-smart-image-optimizer)](https://wphealthkit.com/directory/w3ctrl-smart-image-optimizer)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityDatabaseGDPRType SafetyHook WiringAccessibilityPlugin LifecycleSecurityCoding StandardsTheme StandardsUpdate SafetyWordPress CompatibilityPerformancecompatibilityDependencies

W3ctrl Smart Image Optimizer

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings