Bulk-generate WCAG-friendly image alt text with AI — no API key needed. Every site gets free monthly credits for accessibility (ADA/EAA compliance) an …
31
Score
71
Errors
55
Warnings
+0
Change
Category Scores
Security0
Repo83
Performance100
Maintainability45
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
79
16 issue groups
Security
24
6 issue groups
I18n
20
2 issue groups
Supply Chain
2
1 issue group
WARNINGMaintainabilityDirect IntegrationDirect integration with a third-party AI provider (api.anthropic.com) detected. Consider the WordPress AI Client (wp_ai_client_prompt()) introduced in WordPress 7.0.22
- Category
- Maintainability
- Occurrences
- 22
- Severity
- warning
Sample message
Direct integration with a third-party AI provider (api.anthropic.com) detected. Consider the WordPress AI Client (wp_ai_client_prompt()) introduced in WordPress 7.0.
ERRORI18nMissing Translators CommentA function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.16
- Category
- I18n
- Occurrences
- 16
- Severity
- error
Sample message
A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$current'.10
- Category
- Security
- Occurrences
- 10
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$current'.
ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.10
- Category
- Maintainability
- Occurrences
- 10
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;5
- Category
- Maintainability
- Occurrences
- 5
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORSecurityUnsafe printing functionAll output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.
WARNINGSecurityRequest data is not unslashed$_POST['image_url'] not unslashed before sanitization. Use wp_unslash() or similar4
- Category
- Security
- Occurrences
- 4
- Severity
- warning
Sample message
$_POST['image_url'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORI18nUnordered Placeholders TextMultiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in 'Processed %d of %d images.'.4
- Category
- I18n
- Occurrences
- 4
- Severity
- error
Sample message
Multiple placeholders in translatable strings should be ordered. Expected "%1$d, %2$d", but got "%d, %d" in 'Processed %d of %d images.'.
Show 15 moreShow less
ERRORSecuritySQL query is not prepared2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
WARNINGMaintainabilityslow db query meta query2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
WARNINGMaintainabilityNon-prefixed global variable2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$ai_alt_text_generator".
ERRORSecurityException output is not escaped2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$response'.
WARNINGSecurityInput is not sanitized2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['nonce']
ERRORMaintainabilitycurl curl close2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl errno2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl exec2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilitycurl curl init2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityfile system operations fclose2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopen2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwrite2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
WARNINGMaintainabilityNot In Footer2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORSupply ChainHidden files included2
- Category
- Supply Chain
- Occurrences
- 2
- Severity
- error
Sample message
Hidden files are not permitted.
ERRORMaintainabilitywp function not compatible with requires wp2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
Function "wp_set_script_translations()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.6.0.
External Connections
Potential connections found in static code analysis.
Outbound calls
66
External assets
0
Incoming endpoints
36
Notable Domains
api.openai.com18 · outbound
store.lessbutmore.ai18 · outbound
api.anthropic.com6 · outbound
docs.anthropic.com6 · outbound
help.openai.com6 · outbound
json-schema.org2 · outbound
Platform / Reference Domains
github.com4 · platform/reference
gnu.org2 · platform/reference
w3.org2 · platform/reference
wordpress.org2 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
wp_ajax_nopriv_generate_alt_textpublic
wp_ajax
/wp-json/ai-alt-text-generator/v1/generate-testREST
register_rest_route
/wp-json/ai-alt-text-generator/v1/is-processingREST
register_rest_route
/wp-json/ai-alt-text-generator/v1/managed/connectREST
register_rest_route
/wp-json/ai-alt-text-generator/v1/managed/disconnectREST
register_rest_route
/wp-json/ai-alt-text-generator/v1/managed/statusREST
register_rest_route
Admin AJAX endpoints3
wp_ajax_generate_alt_textauthenticated
wp_ajax
wp_ajax_aatg_process_next_batchauthenticated
wp_ajax
wp_ajax_aatg_processing_statusauthenticated
wp_ajax
Score History
16 score snapshots
v2.7.0
31
Latest
- Findings
- 126
- Errors
- 71
- Warnings
- 55
- Check
- 2.1.0
v2.6.8
31
Score
- Findings
- 127
- Errors
- 72
- Warnings
- 55
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 31 | 126 | 71 | 55 | v2.7.0 | 2.1.0 |
| 31 | 127 | 72 | 55 | v2.6.8 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
LiteSpeed Cache35 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scorePage Builder: Pagelayer – Drag and Drop website builder23 scoreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE35 scoreGutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns23 scoreMatomo Analytics – Powerful, Privacy-First Insights for WordPress19 scoreSchema & Structured Data for WP & AMP33 scoreThe Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid79 scoreWeb Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget40 scoreAuto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO)41 score
Author
Issue
Domain
Related
LiteSpeed Cache35 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreWPCode – Insert Headers and Footers + Custom Code Snippets – WordPress Code Manager88 scorePage Builder: Pagelayer – Drag and Drop website builder23 scoreOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE35 scoreGutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns23 scoreMatomo Analytics – Powerful, Privacy-First Insights for WordPress19 scoreSchema & Structured Data for WP & AMP33 scoreThe Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid79 scoreWeb Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget40 scoreAuto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO)41 score
Related Plugins
Button visually impaired
10k+ active installs
100
ResponsiveVoice Text To Speech
7k+ active installs
100
Definitely allow mobile zooming
7k+ active installs
100
Dark Mode for WP Dashboard
3k+ active installs
100
Accessibility New Window Warnings
1k+ active installs
100
Accessible Carousel & Slider – WCAG AA Compliant Slideshow
600 active installs
100