Smart Image Resize for WooCommerce

Make all WooCommerce product images the same size without cropping. Automatic, no configuration required.

v1.17.1Nabil LemsiehUpdated Added 7k+ installs92% rating
25
Score
582
Errors
404
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance96
Maintainability0

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

986 findings

I18n

405

2 issue groups

Maintainability

373

15 issue groups

Security

174

8 issue groups

ERRORI18nText Domain MismatchMismatched text domain. Expected 'smart-image-resize' but got 'action-scheduler'.392
Category
I18n
Occurrences
392
Severity
error

Sample message

Mismatched text domain. Expected 'smart-image-resize' but got 'action-scheduler'.

ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot restore file: [$file], check your error_log file for debugging."'.87
Category
Security
Occurrences
87
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Cannot restore file: [$file], check your error_log file for debugging."'.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".64
Category
Maintainability
Occurrences
64
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "active_plugins".

WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.57
Category
Maintainability
Occurrences
57
Severity
warning

Sample message

Use of a direct database call is discouraged.

WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().50
Category
Maintainability
Occurrences
50
Severity
warning

Sample message

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNINGMaintainabilityNon-prefixed namespaceNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "WP_Smart_Image_Resize".47
Category
Maintainability
Occurrences
47
Severity
warning

Sample message

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "WP_Smart_Image_Resize".

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wp_sir_exclude_size".42
Category
Maintainability
Occurrences
42
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "_wp_sir_exclude_size".

ERRORMaintainabilitywp function not compatible with requires wpFunction "get_rest_url()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.36
Category
Maintainability
Occurrences
36
Severity
error

Sample message

Function "get_rest_url()" requires WordPress 4.4.0, but your plugin minimum supported version is WordPress 4.0.0.

WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.23
Category
Security
Occurrences
23
Severity
warning

Sample message

Processing form data without nonce verification.

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;23
Category
Maintainability
Occurrences
23
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Show 15 more
WARNINGSecurityDatabase parameter is not escaped20
Category
Security
Occurrences
20
Severity
warning

Sample message

Unescaped parameter $column_name used in $wpdb->get_var()

WARNINGMaintainabilityNon-prefixed global variable13
Category
Maintainability
Occurrences
13
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$at_limit".

WARNINGSecurityRequest data is not unslashed13
Category
Security
Occurrences
13
Severity
warning

Sample message

$_COOKIE[self::COOKIE_NAME] not unslashed before sanitization. Use wp_unslash() or similar

ERRORI18nMissing Translators Comment13
Category
I18n
Occurrences
13
Severity
error

Sample message

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERRORSecurityOutput is not escaped12
Category
Security
Occurrences
12
Severity
error

Sample message

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$function_name'.

WARNINGMaintainabilityNon-prefixed class10
Category
Maintainability
Occurrences
10
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "CronExpression".

WARNINGMaintainabilityDiscouraged PHP function9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

The use of function ini_set() is discouraged

WARNINGSecurityInterpolated SQL is not prepared8
Category
Security
Occurrences
8
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable $placeholders at WHERE ID IN ($placeholders)\n

WARNINGSecurityMissing nonce verification7
Category
Security
Occurrences
7
Severity
warning

Sample message

Processing form data without nonce verification.

WARNINGMaintainabilityNon-prefixed constant5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

Global constants defined by a theme/plugin should start with the theme/plugin prefix. Found: "WP_SIR_BASENAME".

WARNINGMaintainabilityerror log error log5
Category
Maintainability
Occurrences
5
Severity
warning

Sample message

error_log() found. Debug code should not normally be used in production.

ERRORSecuritySQL query is not prepared4
Category
Security
Occurrences
4
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $sql

WARNINGMaintainabilityslow db query meta query4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Detected usage of meta_query, possible slow query.

WARNINGMaintainabilityDynamic hook name4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".

WARNINGMaintainabilityerror log var export4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

var_export() found. Debug code should not normally be used in production.

External Connections

Potential connections found in static code analysis.

20 domains

Outbound calls

111

External assets

0

Incoming endpoints

7

Notable Domains

tools.ietf.org33 · outbound
php.net17 · outbound
sirplugin.com14 · outbound
en.wikipedia.org4 · outbound
php-fig.org4 · outbound
actionscheduler.org3 · outbound

Platform / Reference Domains

github.com9 · platform/reference
wordpress.org8 · platform/reference
core.trac.wordpress.org2 · platform/reference
gnu.org2 · platform/reference
developer.wordpress.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

wp_ajax_nopriv_public

wp_ajax

Admin AJAX endpoints6
wp_ajax_wp_sir_bulk_restore_batchauthenticated

wp_ajax

wp_ajax_wp_sir_bulk_restore_statusauthenticated

wp_ajax

wp_ajax_wp_sir_restore_originalauthenticated

wp_ajax

wp_ajax_wp_sir_switch_processorauthenticated

wp_ajax

wp_ajax_wp_sir/dismiss_review_request_noticeauthenticated

wp_ajax

wp_ajax_wp_sir/remindme_review_request_noticeauthenticated

wp_ajax

Score History

3 score snapshots

+1
1007550250Jun 21, 2026, 12:17 AM UTC Score 24/100 Plugin v1.16.0 Plugin Check 2.0.0 516 errors, 379 warningsJun 26, 2026, 01:28 AM UTC Score 25/100 Plugin v1.17.0 Plugin Check 2.0.0 580 errors, 404 warningsJun 27, 2026, 01:47 PM UTC Score 25/100 Plugin v1.17.1 Plugin Check 2.0.0 582 errors, 404 warningsJun 21, 2026Jun 27, 2026

v1.17.1

25

Latest

Findings
986
Errors
582
Warnings
404
Check
2.0.0

v1.17.0

25

Score

Findings
984
Errors
580
Warnings
404
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

37 nodes

Related

Related Plugins