PLUGIN SECURITY
Is Simple Image Sizes safe?
This plugin lets you create custom image sizes for your site. Override your theme sizes directly on the Media settings page, regenerate thumbnails, an …
What this plugin does
- Slug:
simple-image-sizes - Author: Nicolas Juen
- 60000+ active installs
- 92/100 rating (91 reviews on wordpress.org)
- 1045813 all-time downloads
- On WordPress.org since 2011-03-03
custom imagescustom sizesimageimagesthumbnail regenerate
Maintenance status
- Latest known version: 3.2.5
- Last updated: 2026-08-17 10:12am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 8.0+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
1 known CVE on file for Simple Image Sizes. Reported between 2025 and 2025.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-24810 | Simple Image Sizes [simple-image-sizes] < 3.2.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 3.2.4 | 3.2.4 | 2025-01-28 | ✓ fixed in latest |
How to fix it
Keep Simple Image Sizes updated — 3.2.5 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- WP Header Images — 5000+ active installs — 88/100 (35) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.