Thumbnail regeneration tools delete derived image sizes, read original uploads, create replacement files, and execute batch operations across the media library. Force Regenerate Thumbnails version 2.3.0 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64694, confirming that the review focused on attachment authorization, path confinement, batch requests, file deletion scope, image processing inputs, and progress handling.
| Name of | Force Regenerate Thumbnails |
| Version | 2.3.0 |
| Active installations | 200,000+ |
| Description | Deletes old derived image sizes and regenerates thumbnails for all uploads, selected Media Library batches, or a single attachment. |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored and Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Proudly earned the “Plugin Security Certification” (PSC) from CleanTalk, indicating adherence to stringent security standards. |
| Additional Information | Use Force Regenerate Thumbnails with confidence backed by the “Plugin Security Certification” (PSC). Back up uploads, limit media management permissions, test custom sizes on a small set, and confirm original files remain intact before large batch operations. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkJoin the community of developers who prioritize security. Highlight your plugin in the WordPress catalog.
Key Features
Force Regenerate Thumbnails regenerates WordPress thumbnail sizes while removing outdated derived files. Administrators can process all uploads from the Tools area, select batches in Media Library list mode, or run the operation for a single attachment. The workflow reads original media, determines registered image sizes, deletes obsolete thumbnails, and writes replacement files through WordPress image processing functions.
Security Assurance
The CleanTalk Plugin Security Certification evaluation focused on attachment capability checks, nonce validation, confinement to approved upload paths, and precise separation between original files and generated sizes. The review also considered batch identifiers, image metadata, progress requests, file deletion scope, malformed image input, output naming, and protection against unauthorized media operations.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication and Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
With PSC-2026-64694, Force Regenerate Thumbnails version 2.3.0 demonstrates strong baseline security for thumbnail deletion and regeneration workflows. The certification addresses attachment permissions, request integrity, upload path handling, batch processing, image metadata, and generated file scope. Site owners should back up the uploads directory, test a representative image first, and monitor storage and processing limits during large regeneration jobs.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.
