v1.0.3 - WebP/Next-Gen Optimization Support, Memory Resilience & Security Hardening

🚀 Release v1.0.3 — WebP/Next-Gen Optimization Support, Memory Resilience & Security Hardening

This release introduces comprehensive WebP and next-generation derivative image optimization support, intelligent memory and execution resilience for large media libraries, graceful error recovery, and robust security hardening.

✨ Key Features & Enhancements

• WebP & Next-Gen Image Optimization Support:

  • Accurately identifies and associates WebP and AVIF derivative images generated by image optimizers (e.g., EWWW Image Optimizer, W3 Total Cache, Imagify, Smush, ShortPixel) back to their parent media library items.
  • Automatically marks converted WebP images as "Used" whenever their corresponding JPEG/PNG source image is actively used across your site.

• Dynamic Resource Elevation & Memory Resilience:

  • Added autonomous resource elevation (wp_raise_memory_limit('admin'), 512M ceiling) and extended execution time limit (300s).
  • Eliminates out-of-memory fatal crashes when scanning large media libraries (1,000+ to 10,000+ files).

• Graceful Fatal Error Recovery & Diagnostic Alerts:

  • Implemented a PHP shutdown recovery handler with a reserved memory buffer to gracefully catch fatal memory exhaustion or execution timeouts and return structured JSON responses.
  • Added smart error sniffing in the dashboard AJAX handler to replace generic server errors with clear, actionable warnings and hosting memory advice.

• Security Hardening (PHP Object Injection):

  • Enforced array( 'allowed_classes' => false ) across all @unserialize() calls for postmeta, options, termmeta, and widgets to eliminate POP gadget execution and object injection attack vectors.

• CSV Formula Injection Protection (OWASP ASVS):

  • Sanitized CSV export data to neutralize spreadsheet formula injection vulnerabilities (=, +, -, @, , ).

---

📦 Download & Installation

Download wp-media-usage-tracker-v1.0.3.zip below and install via WordPress Admin > Plugins > Add New > Upload Plugin, or extract to your wp-content/plugins/ directory.

v1.0.2 - Bug Fixes & Deep CSS/Theme Scanner

🚀 Release v1.0.2 — Bug Fixes & Deep CSS/Theme Scanning

This update resolves critical false positives with WordPress attachment parent associations and significantly enhances theme and CSS scanning capabilities.

🐛 Bug Fixes

• Eliminated False Attached to Post (Parent) Usages: WordPress automatically associates an attachment with a post's post_parent if uploaded from that post edit screen, even if the media is never inserted into the content or is subsequently deleted. WMUT no longer considers post_parent alone as an active usage, eliminating false positives for uninserted media (e.g., products-img.jpg).
• Cleaned Status Hierarchy: Fixed an issue where media replaced in CSS or content remained marked as used due to stale parent associations.

✨ Enhancements

• Deep CSS url(...) Scanning: Scans all stylesheet files (style.css, child theme CSS, custom styles) for url(...) declarations (supporting single quotes, double quotes, unquoted paths, query parameters like ?v=1, and SVG hash anchors).
• Template & Script Attribute Detection: Added detection for HTML/template image references in src, data-src, data-bg, and srcset attributes across theme templates.
• Quoted Media String Parsing: Catches media filenames referenced inside PHP variables and JavaScript configs within theme files.
• Fixed Readme Menu Item Typo: Corrected nav_menu_item formatting in plugin documentation.

📦 Download & Installation

Download wp-media-usage-tracker-v1.0.2.zip below and install via WordPress Admin > Plugins > Add New > Upload Plugin, or extract to your wp-content/plugins/ directory.

v1.0.1 - Initial Release

🎉 Initial Release (v1.0.1)

WP Media Usage Tracker is a 100% safe, read-only WordPress plugin to track media usage and find unused images, PDFs, and documents.

✨ Core Highlights:

• Deeply scans Posts, Pages, and Custom Post Types across all statuses.
• Tracks Featured Images (_thumbnail_id) accurately.
• Full support for Gutenberg core blocks (core/image, core/cover, core/file, etc.).
• Deeply decodes LazyBlocks JSON attributes, repeaters, and rich text fields.
• Scans Advanced Custom Fields (ACF / SCF) image arrays, file download fields, and repeaters.
• Scans Navigation Menu items and Customizer theme_mods.
• Scans active theme template files (single.php, header.php) for hardcoded assets.
• 100% Read-only and safe (zero auto-delete risk).
• Interactive admin dashboard with live search, filters, and 1-click CSV export.

📥 Installation:

Download wp-media-usage-tracker-v1.0.1.zip below and upload via WordPress Admin > Plugins > Add New > Upload Plugin.