Skip to content
PluginCanary

Image Source Control Lite - Show Image Credits and Captions

by Thomas Maier · 3,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: 3 vulnerabilities published in the last 24 months.

87/ 100 Canary Score
Sub-scores for Image Source Control Lite - Show Image Credits and Captions
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
webzunft17 Dec 2012 to 26 Aug 2026, 167 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 months ago
Releases, 24 months
16
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Image Source Control Lite - Show Image Credits and Captions
Q1 20245
Q2 20244
Q3 20244
Q4 20243
Q1 20255
Q2 20252
Q3 20251
Q4 20251
Q1 20262
Q2 20263
Q3 20261
Q4 20260

Last release 26 Aug 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
20 Apr 2026Image Source Control Lite – Show Image Credits and Captions <= 3.9.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'Image Source' Field6.4<= 3.9.13.9.20
17 Jan 2025Image Source Control Lite – Show Image Credits and Captions <= 2.28.0 - Reflected Cross-Site Scripting6.1<= 2.28.02.28.10
15 Jan 2025Image Source Control <= 2.29.0 - Reflected Cross-Site Scripting6.1<= 2.29.02.29.10
29 Dec 2023Image Source Control <= 2.17.0 - Sensitive Information Exposure via Log File5.3<= 2.17.02.17.10
4 Oct 2021Image Source Control Lite < 2.3.1 - Insecure Direct Object Reference4.3< 2.3.12.3.10

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.6 from 42 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star37
4 star1
3 star1
2 star0
1 star3

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Image Source Control Lite - Show Image Credits and Captions
4 May 2026171
11 May 2026215
18 May 2026279
25 May 2026187
1 Jun 2026159
8 Jun 2026149
15 Jun 2026175
22 Jun 20261,568
29 Jun 2026375
6 Jul 2026304
13 Jul 2026220
20 Jul 2026238
27 Jul 2026213
3 Aug 2026223
10 Aug 2026156
17 Aug 20261,582
24 Aug 2026619
31 Aug 2026346
7 Sep 2026342
14 Sep 2026408
21 Sep 2026373
28 Sep 2026391
5 Oct 2026291
12 Oct 2026252
19 Oct 2026368
26 Oct 2026334
2 Nov 202691

Weekly downloads over the last 4 weeks are 30% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version3.12.0
AuthorThomas Maier
Added17 Dec 2012
Last updated26 Aug 2026
Active installs3,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryContent Management > Blog & Article Publishing
Tagscredits, captions, copyrights, attributions, image sources

Other plugins by this author: Individual Multisite Author

Questions

Is Image Source Control Lite - Show Image Credits and Captions still maintained?

Image Source Control Lite - Show Image Credits and Captions was last updated on 26 Aug 2026. Its Canary status is Healthy.

Is Image Source Control Lite - Show Image Credits and Captions safe?

Image Source Control Lite - Show Image Credits and Captions has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Image Source Control Lite - Show Image Credits and Captions?

The wordpress.org author is Thomas Maier. Recent committers: webzunft, plugin-master. We have recorded no ownership change.

What can I use instead of Image Source Control Lite - Show Image Credits and Captions?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue