Image optimization plugins read files from the uploads directory, create alternative formats, and route visitor requests to generated assets. Converter for Media – Optimize images | Convert WebP & AVIF version 6.6.5 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65700. The review focused on source file validation, path confinement, conversion jobs, generated output, delivery rules, and permission checks around administrative actions.
| Name of | Converter for Media – Optimize images | Convert WebP & AVIF |
| Version | 6.6.5 |
| Active installations | 500,000+ |
| Description | Converts JPEG, PNG, and GIF uploads to WebP, with optional AVIF support, then serves the best available format while retaining the original image as a fallback. |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored and Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Proudly earned the “Plugin Security Certification” (PSC) from CleanTalk, indicating adherence to stringent security standards. |
| Additional Information | Use Converter for Media with confidence backed by the “Plugin Security Certification” (PSC). Keep original images available, monitor storage during bulk conversion, and recheck delivery after changing server, cache, CDN, or rewrite settings. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkJoin the community of developers who prioritize security. Highlight your plugin in the WordPress catalog.
Key Features
Converter for Media – Optimize images | Convert WebP & AVIF can optimize existing Media Library images in a batch and process new uploads automatically. It selects WebP or AVIF when a compatible browser requests an image and falls back to the original asset when required. Version 6.6.5 adds support for WordPress 7.1.
Security Assurance
The CleanTalk Plugin Security Certification evaluation examined authorization for conversion and configuration actions, validation of source and output paths, and handling of filenames, formats, and server responses. The review also considered Media Library batches, automatic conversion through scheduled work, delivery redirects, browser fallback behavior, and failure handling when the server cannot process an image.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication and Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
With PSC-2026-65700, Converter for Media – Optimize images | Convert WebP & AVIF version 6.6.5 demonstrates a strong security baseline for image conversion and delivery workflows. The certification covers privileged settings, source and output paths, conversion requests, generated assets, and format selection. Site owners should retain recoverable originals, watch storage during large batches, and verify generated formats after infrastructure changes.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.
