CaphLabs

Keep Originals Safe, convert JPEG/PNG images to WebP and makes WebP the canonical file. WP returns <code>.webp</code> URLs, Keeping originals safely archived.
<h3>How it works (high level)</h3>
<ol>
<li>
Convert
<ul>
<li>For a JPG/PNG attachment, the plugin generates a WebP for the full image and all WordPress-generated sizes.</li>
<li>Conversion is done through WordPress’ image editor system (WP_Image_Editor), meaning it uses GD or Imagick (whichever your server supports) with WebP support enabled.</li>
</ul>
</li>
<li>
Move originals
<ul>
<li>The original JPG/PNG files are moved to:
<ul>
<li><code>wp-content/uploads/_originals/...</code></li>
</ul>
</li>
<li>The folder structure mirrors your uploads structure.</li>
</ul>
</li>
<li>
Update WordPress to serve WebP
<ul>
<li>Attachment “file” + metadata are updated so WordPress serves <code>.webp</code> as the attachment file.</li>
<li>Attachment mime type is updated to <code>image/webp</code>.</li>
</ul>
</li>
<li>
Optional: Replace old URLs everywhere
<ul>
<li>If enabled, the plugin can replace old <code>.jpg/.png</code> URLs across:
<ul>
<li>post content</li>
<li>postmeta</li>
</ul>
</li>
<li>Replacement is serialized-safe (does not break serialized arrays).</li>
</ul>
</li>
</ol>
<h3>Background jobs (keeps running after page reload)</h3>
Conversion/repair/sweep jobs are designed to run in the background. They keep ticking even if you refresh the page or close the tab.
The plugin uses multiple loopback methods (admin-post / REST / public tick fallback) so it can keep working even on restrictive hosting setups.
<h3>Log + “it looks frozen” note</h3>
A rolling “terminal style” log is written to: 
– <code>wp-content/uploads/hsbc-webp-only/logs/webp-only.log</code>
If the log appears to freeze in the admin page: 
– click Refresh Log, or 
– refresh the page
The job may still be running server-side; refreshing the log/page usually catches up.
<h3>Usage</h3>
Go to Media → WebP Only.
<h3>Settings</h3>
<ul>
<li>Quality
<ul>
<li>WebP quality for conversion (0–100).</li>
</ul>
</li>
<li>Batch size
<ul>
<li>How many items to process per tick. Smaller batches reduce server load.</li>
</ul>
</li>
<li>Replace old .jpg/.png URLs across content + postmeta (serialized-safe)
<ul>
<li>Recommended if your site content contains hard-coded image URLs.</li>
</ul>
</li>
<li>Sweep Include / Exclude
<ul>
<li>Used by the Sweep tools to control which folders are scanned.</li>
</ul>
</li>
</ul>
<h3>Conversion Jobs (buttons)</h3>
Start Bulk Convert 
– Converts Media Library attachments (JPG/PNG) in batches. 
– Moves originals to <code>uploads/_originals/</code>. 
– Updates attachment metadata so WordPress serves <code>.webp</code>. 
– Optional URL replacement (content + postmeta).
Start Repair/Cleanup 
– Repairs inconsistencies if something was partially converted or moved. 
– Useful after restores/migrations or if some attachments have mismatched metadata. 
– Optional URL replacement.
Start Folder Sweep 
– Scans the filesystem for eligible images (based on your Sweep Include/Exclude rules). 
– Designed for sites with additional image folders beyond standard uploads. 
– Optional URL replacement.
Stop Job 
– Stops the currently running job.
<h3>Maintenance / Cleanup (buttons)</h3>
Delete duplicate _originals 
– Deletes backup files in <code>uploads/_originals/</code> *only when* an identical file already exists in <code>uploads/</code>. 
– This is a cleanup tool for situations where originals were restored back into uploads and you no longer need the archived duplicate.
Delete duplicate _webp 
– Removes orphaned WebP cache files in: 
 – <code>uploads/_webp/</code> 
– Only deletes WebP files that no longer match anything in <code>uploads/</code> or <code>uploads/_originals/</code>.
Delete duplicate sweep _originals 
– Maintenance cleanup for non-uploads roots (folders under <code>wp-content/</code>) that contain their own <code>_originals/</code> folders. 
– It uses your Sweep Include list to find those roots. 
– Only deletes a file from <code><root>/_originals/</code> when the same file exists at <code><root>/</code> AND the file size matches (safe duplicate).
Revert Everything 
– Restores original JPG/PNG files from <code>uploads/_originals/</code> back into <code>uploads/</code>. 
– Reverts attachment metadata so WordPress serves the originals again.
<h3>Log controls</h3>
Refresh Log 
– Pulls the latest log tail into the admin screen.
Reset Log 
– Clears the log file.
<h3>Requirements</h3>
<ul>
<li>WordPress’ image editor must support WebP.
<ul>
<li>GD with WebP support, or</li>
<li>Imagick with WebP support</li>
</ul>
</li>
<li>If WebP conversion is not supported on your server, conversion/repair/sweep will refuse to run (revert tools can still work).</li>
</ul>

OrigiSafe — Advanced Image Optimizer (WebP) — Keep Originals Safe

Convert JPG/PNG uploads (and existing library) to WebP, move originals to /uploads/_originals/, and update Media Library metadata - WP serves .webp

ideasToCode

By default, WordPress does not allow uploading file formats like SVG, WebP, and ICO (in some hostings) citing security reasons. These files are becoming very popular and in fact, are recommended by popular web speed scan platforms like Google PageSpeed Insights or Gtmetrix to resolve the serve images in nextgen formats. Thus, this FREE PLUGIN will enable you to upload these files.
Simply install the plugin and your WordPress website now can easily accept media in SVG, WebP, and ICO format. You will also have an option to disable some or all images format (of the three) as required.
Tutorial video
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/y_BtOFDS3U0?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
If you want to learn more about the plugin – please check our<a href="https://ideastocode.com/plugins/enable-svg-webp-ico-upload/" rel="nofollow ugc"> website – ideastocode.com.</a>

Enable SVG, WebP, and ICO Upload


The Enable SVG, WebP & ICO Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in versions up to 1.0.4. This makes it possible for authenticated attackers to upload arbitrary files on the affected site's server which may make a potential remote code execution.



More information on the threat intel on the Wordfence website.


Enable SVG, WebP & ICO Upload <= 1.0.4 - Arbitrary File Upload


Dear All,



Here are the brief updates we’ve made to our plugins:




We have resolved all the security issues raised for the plugins, and they now eliminate all vulnerabilities.



We have removed the notices that appeared during plugin installation—everything has been resolved.



We have moved the plugin under "Settings," removing unnecessary additions to the WordPress admin sidebar.




We will continue to make frequent updates to address any issues in the future.Thank you for your support :)


Resolved all the security issues

This plugin will enable uploading SVG, WebP & ICO image files to WordPress sites.

OrigiSafe — Advanced Image Optimizer (WebP) — Keep Originals Safe vs Enable SVG, WebP, and ICO Upload