This plugin allows you to automatically generate an Alt Text for images uploaded into the media library via AI.
42
Score
59
Errors
20
Warnings
-1
Change
Category Scores
Security0
Repo100
Performance100
Maintainability83
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
63
9 issue groups
Maintainability
15
8 issue groups
I18n
1
1 issue group
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bodyJson'.27
- Category
- Security
- Occurrences
- 27
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$bodyJson'.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$settingsUrl'.9
- Category
- Security
- Occurrences
- 9
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$settingsUrl'.
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().7
- Category
- Security
- Occurrences
- 7
- Severity
- error
Sample message
Sanitization missing for register_setting().
WARNINGMaintainabilityDirect IntegrationDirect integration with a third-party AI provider (api.anthropic.com) detected. Consider the WordPress AI Client (wp_ai_client_prompt()) introduced in WordPress 7.0.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Direct integration with a third-party AI provider (api.anthropic.com) detected. Consider the WordPress AI Client (wp_ai_client_prompt()) introduced in WordPress 7.0.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $query5
- Category
- Security
- Occurrences
- 5
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $query
ERRORSecurityDatabase parameter is not escapedUnescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 86.4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
Unescaped parameter $query used in $wpdb->get_results()\n$query assigned unsafely at line 86.
ERRORMaintainabilityNo Explicit VersionVersion parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Version parameter is not explicitly set or has been set to an equivalent of "false" for wp_enqueue_script; This means that the WordPress core version will be used which is not recommended for plugin or theme development.
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$tableName} at "SELECT * FROM {$tableName} ORDER BY time DESC LIMIT %d"2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$tableName} at "SELECT * FROM {$tableName} ORDER BY time DESC LIMIT %d"
WARNINGSecurityRequest data is not unslashed$_REQUEST['bulk_action_name'] not unslashed before sanitization. Use wp_unslash() or similar2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_REQUEST['bulk_action_name'] not unslashed before sanitization. Use wp_unslash() or similar
Show 8 moreShow less
WARNINGI18nDiscouraged text-domain loading1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilityDynamic hook name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "self::FILTER_FORCE_IPV4".
WARNINGSecurityInput is not sanitized1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_REQUEST['media']
ERRORMaintainabilitycurl curl setopt1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Using cURL functions is highly discouraged. Use wp_remote_get() instead.
ERRORMaintainabilityparse url parse url1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
WARNINGMaintainabilityNot In Footer1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.
ERRORMaintainabilityinvalid tested upto minor1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 7.1.0 The version number should only include major versions 7.1.
ERRORMaintainabilityMissing direct file access protection1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
External Connections
Potential connections found in static code analysis.
Outbound calls
24
External assets
0
Incoming endpoints
0
Notable Domains
php-fig.org4 · outbound
php-di.org3 · outbound
api.anthropic.com2 · outbound
api.openai.com2 · outbound
generativelanguage.googleapis.com2 · outbound
Platform / Reference Domains
github.com4 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
2 score snapshots
v3.0.3
42
Latest
- Findings
- 79
- Errors
- 59
- Warnings
- 20
- Check
- 2.1.0
v2.8.2
43
Score
- Findings
- 65
- Errors
- 52
- Warnings
- 13
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 42 | 79 | 59 | 20 | v3.0.3 | 2.1.0 |
| 43 | 65 | 52 | 13 | v2.8.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Plugin
Author
Issue
Exception output is not escaped27 findingsOutput is not escaped9 findingsSetting is missing a sanitization callback7 findingsDirect Integration6 findingsNonce verification recommended6 findingsSQL query is not prepared5 findingsDatabase parameter is not escaped4 findingsNo Explicit Version3 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreWeb Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget40 scorePixelYourSite – Your smart PIXEL (TAG) & API Manager24 scoreAuto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO)41 scoreAI Engine – The Chatbot, AI Framework & MCP for WordPress23 scoreAccessibility by UserWay39 score
Plugin
Author
Issue
Exception output is not escaped27 findingsOutput is not escaped9 findingsSetting is missing a sanitization callback7 findingsDirect Integration6 findingsNonce verification recommended6 findingsSQL query is not prepared5 findingsDatabase parameter is not escaped4 findingsNo Explicit Version3 findings
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreClassic Editor63 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreWP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin30 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreWeb Accessibility (formally known as Ally) – WCAG Scanning, Guided Fixes, Usability Widget40 scorePixelYourSite – Your smart PIXEL (TAG) & API Manager24 scoreAuto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO)41 scoreAI Engine – The Chatbot, AI Framework & MCP for WordPress23 scoreAccessibility by UserWay39 score
Related Plugins
AI Puffer – Chat. Create. Automate. (formerly AI Power)
10k+ active installs
100
ResponsiveVoice Text To Speech
7k+ active installs
100
Definitely allow mobile zooming
7k+ active installs
100
Dark Mode for WP Dashboard
3k+ active installs
100
Accessibility New Window Warnings
1k+ active installs
100
Accessible Carousel & Slider – WCAG AA Compliant Slideshow
600 active installs
100