Compress, Resize & Lazy Load Images – WPvivid Image Optimization

Optimize, compress and resize images in WordPress in bulk. Lazy load images. Auto resize and optimize images upon upload.

v0.9.25wpvividpluginsUpdated 2026-06-01Added Mar 18, 202110k+ installs86% rating
47
Score
107
Errors
58
Warnings
+0
Change

Category Scores

Security32
Repo97
Performance100
Maintainability22

Top Issues by Category

maintainability106
1missing direct file access protectionmissing_direct_file_access_protectionERROR282file system operations fopenWordPress.WP.AlternativeFunctions.file_system_operations_fopenERROR143DiscouragedSquiz.PHP.DiscouragedFunctions.DiscouragedWARNING104error log error logWordPress.PHP.DevelopmentFunctions.error_log_error_logWARNING85file system operations fcloseWordPress.WP.AlternativeFunctions.file_system_operations_fcloseERROR86file system operations freadWordPress.WP.AlternativeFunctions.file_system_operations_freadERROR67file system operations fwriteWordPress.WP.AlternativeFunctions.file_system_operations_fwriteERROR58file system operations mkdirWordPress.WP.AlternativeFunctions.file_system_operations_mkdirERROR49Non Prefixed Function FoundWordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFoundWARNING310rename renameWordPress.WP.AlternativeFunctions.rename_renameERROR311trademarked termtrademarked_termWARNING312FoundGeneric.PHP.ForbiddenFunctions.FoundERROR213Plugin Directory WritePluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWriteERROR214prevent path disclosure phpinfoWordPress.PHP.DevelopmentFunctions.prevent_path_disclosure_phpinfoWARNING215file system operations rmdirWordPress.WP.AlternativeFunctions.file_system_operations_rmdirERROR216rand mt randWordPress.WP.AlternativeFunctions.rand_mt_randERROR217strip tags strip tagsWordPress.WP.AlternativeFunctions.strip_tags_strip_tagsERROR218Direct QueryWordPress.DB.DirectDatabaseQuery.DirectQueryWARNING119No CachingWordPress.DB.DirectDatabaseQuery.NoCachingWARNING1
i18n28
security27

Issues Details

165 issues found in latest scan

ERROR28
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

ERROR20
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'wpvivid-imgoptim' but got 'WpAdminStyle'.

WARNING17
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_POST['cdn'] not unslashed before sanitization. Use wp_unslash() or similar

ERROR14
WordPress.WP.AlternativeFunctions.file_system_operations_fopen

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().

WARNING10
Squiz.PHP.DiscouragedFunctions.Discouraged

The use of function ini_set() is discouraged

WARNING8
WordPress.PHP.DevelopmentFunctions.error_log_error_log

error_log() found. Debug code should not normally be used in production.

ERROR8
WordPress.WP.AlternativeFunctions.file_system_operations_fclose

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().

ERROR8
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

ERROR6
WordPress.WP.AlternativeFunctions.file_system_operations_fread

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fread().

WARNING5
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

ERROR5
WordPress.WP.AlternativeFunctions.file_system_operations_fwrite

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().

ERROR4
WordPress.WP.AlternativeFunctions.file_system_operations_mkdir

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().

WARNING3
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "phpseclib_resolve_include_path".

WARNING3
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_REQUEST['_wp_http_referer']

ERROR3
WordPress.WP.AlternativeFunctions.rename_rename

rename() is discouraged. Use WP_Filesystem::move() to rename a file.

WARNING3
trademarked_term

The plugin name includes a restricted term. Your chosen plugin name - "Compress, Resize & Lazy Load Images - WPvivid Image Optimization" - contains the restricted term "wp" which cannot be used at all in your plugin name.

ERROR2
Generic.PHP.ForbiddenFunctions.Found

The use of function create_function() is forbidden

ERROR2
PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

Plugin folders are deleted when upgraded. Do not save data to the plugin folder using fwrite(). Detected usage of constant WP_CONTENT_DIR. Use wp_upload_dir() to get the uploads directory path or save to the database instead.

WARNING2
WordPress.PHP.DevelopmentFunctions.prevent_path_disclosure_phpinfo

phpinfo() can lead to full path disclosure.

WARNING2
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

ERROR2
WordPress.WP.AlternativeFunctions.file_system_operations_rmdir

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: rmdir().

ERROR2
WordPress.WP.AlternativeFunctions.rand_mt_rand

mt_rand() is discouraged. Use the far less predictable wp_rand() instead.

ERROR2
WordPress.WP.AlternativeFunctions.strip_tags_strip_tags

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WARNING1
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING1
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

Latest Snapshot

Findings

165

Errors

107

Warnings

58

Score History

First score snapshot

First scan completed Jun 20, 2026

v0.9.25 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v0.9.25

47

Latest

Findings
165
Errors
107
Warnings
58
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins