Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO)

Auto-optimize (bulk) your Image title attributes (Image title tags, title text) from page/post/product titles &/or site name or with custom instru …

v2.0.3PagupUpdated Added 1k+ installs72% rating
41
Score
16
Errors
37
Warnings
+3
Change

Category Scores

Security4
Repo88
Performance100
Maintainability79

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

53 findings

Security

30

7 issue groups

Maintainability

19

10 issue groups

Repo Compliance

3

3 issue groups

I18n

1

1 issue group

WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.14
Category
Security
Occurrences
14
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGSecurityRequest data is not unslashed$_POST[$key] not unslashed before sanitization. Use wp_unslash() or similar5
Category
Security
Occurrences
5
Severity
warning

Sample message

$_POST[$key] not unslashed before sanitization. Use wp_unslash() or similar

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$DomController".3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$DomController".

ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.3
Category
Security
Occurrences
3
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$this'.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.3
Category
Security
Occurrences
3
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $placeholders2
Category
Security
Occurrences
2
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $placeholders

WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_POST['bigta_custom_title']. Check that the array index exists before using it.2
Category
Security
Occurrences
2
Severity
warning

Sample message

Detected usage of a possibly undefined superglobal array index: $_POST['bigta_custom_title']. Check that the array index exists before using it.

Show 11 more
ERRORMaintainabilityNon Enqueued Script2
Category
Maintainability
Occurrences
2
Severity
error

Sample message

Scripts must be registered/enqueued via wp_enqueue_script()

ERRORMaintainabilityForbidden PHP function found1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

The use of function get_post_type_labels() is forbidden

WARNINGMaintainabilityerror log var dump1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

var_dump() found. Debug code should not normally be used in production.

WARNINGSecurityInput is not sanitized1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_POST['options']

WARNINGMaintainabilityMissing Version1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Resource version not set in call to wp_register_style(). This means new versions of the style may not always be loaded due to browser caching.

ERRORI18nMissing Translators Comment1
Category
I18n
Occurrences
1
Severity
error

Sample message

A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

WARNINGMaintainabilitymismatched plugin name1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "Bulk Auto Image Title Attribute (Image Title tag) optimizer (Image SEO)" is different from the name declared in plugin header "BIGTA - Bulk Image Title Attribute".

ERRORRepo Complianceplugin header no license1
Category
Repo Compliance
Occurrences
1
Severity
error

Sample message

Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.

WARNINGRepo Complianceplugin header nonexistent domain path1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Domain Path" header in the plugin file must point to an existing folder. Found: "languages"

WARNINGRepo Compliancereadme parser warnings trimmed short description1
Category
Repo Compliance
Occurrences
1
Severity
warning

Sample message

The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.

ERRORMaintainabilitywp function not compatible with requires wp1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Function "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.1.0.

External Connections

Potential connections found in static code analysis.

37 domains

Outbound calls

196

External assets

12

Incoming endpoints

6

Notable Domains

freemius.com10 · outbound
php.net6 · outbound
benalman.com2 · outbound
choosealicense.com2 · outbound

Platform / Reference Domains

gnu.org113 · platform/reference
wordpress.org20 · platform/reference
w3.org7 · platform/reference
api.wordpress.org2 · platform/reference
github.com2 · platform/reference
make.wordpress.org2 · platform/reference
core.trac.wordpress.org1 · platform/reference

External Asset Domains

Incoming Endpoints

No public endpoints detected.

Admin AJAX endpoints6
admin_post_fs_clone_resolutionauthenticated

admin_post

wp_ajax_bigta__onboardingauthenticated

wp_ajax

wp_ajax_bigta__optionsauthenticated

wp_ajax

wp_ajax_dismiss_admin_noticeauthenticated

wp_ajax

wp_ajax_fs_dismiss_notice_action_{$ajax_action_suffix}authenticated

wp_ajax

wp_ajax_fs_toggle_debug_modeauthenticated

wp_ajax

Score History

2 score snapshots

+3
1007550250Jun 25, 2026, 06:41 AM UTC Score 38/100 Plugin v2.0.2 Plugin Check 2.0.0 56 errors, 39 warningsJun 26, 2026, 11:25 PM UTC Score 41/100 Plugin v2.0.3 Plugin Check 2.0.0 16 errors, 37 warningsJun 25, 2026Jun 26, 2026

v2.0.3

41

Latest

Findings
53
Errors
16
Warnings
37
Check
2.0.0

v2.0.2

38

Score

Findings
95
Errors
56
Warnings
39
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

36 nodes

Related Plugins