Image Source Control Lite – Show Image Credits and Captions

77 Quality Score

Active Installs

16/30

With roughly 3,000 active installs, the plugin sits in a niche category rather than mass-market territory, so the popularity score reflects a focused but small user base.

Update Freshness

25/25

The plugin was updated within the last few weeks of the assessment window and supports current WordPress core, earning a perfect maintenance score.

User Rating

14/15

Out of 42 ratings the plugin scores 92 out of 100, indicating strong satisfaction among the small group of users who have reviewed it.

Support Health

8/15

Zero public support threads have been opened, which could mean either the plugin rarely causes problems or that support requests are handled privately, so the available signal is limited.

WP Compatibility

15/15

The plugin is tested with WordPress 7.0, requires WordPress 6.0 or higher, and needs PHP 7.4, putting it comfortably in line with current standards.

Scores higher than 55% of indexed plugins

About

Show image credits, image captions, and copyrights. Manage image sources, licenses and AI label. The original plugin since 2012.

Active Installs 3k+

Rating ★★★★½ 4.6/5

Last Updated 2026-08-26 8:42am GMT

Requires WordPress 6.0+

Tested Up To 7.1

Requires PHP 7.4+

Security History

5 known vulnerabilities, all patched

5 Medium

Most recent: April 20, 2026

View details ▸

Image Source Control Lite – Show Image Credits and Captions <= 3.9.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'Image Source' Field Medium

April 20, 2026 Patched in ["3.9.2"] CVE-2026-4852

Image Source Control Lite – Show Image Credits and Captions <= 2.28.0 - Reflected Cross-Site Scripting Medium

January 17, 2025 Patched in ["2.28.1"] CVE-2024-13515

Image Source Control <= 2.29.0 - Reflected Cross-Site Scripting Medium

January 15, 2025 Patched in ["2.29.1"] CVE-2025-22711

Image Source Control <= 2.17.0 - Sensitive Information Exposure via Log File Medium

December 29, 2023 Patched in ["2.17.1"] CVE-2023-52187

Image Source Control Lite < 2.3.1 - Insecure Direct Object Reference Medium

October 4, 2021 Patched in ["2.3.1"] CVE-2021-24781

What It Does

Image Source Control Lite adds an attribution field to every image in the WordPress media library, then displays a configurable credit, caption, or copyright notice beneath images on the front end. It includes a workflow that flags images with missing sources during content editing, helping site owners keep track of where every visual asset came from. The plugin supports global defaults while still allowing per-image overrides.

Who It's For

This plugin is best for editorial teams, photography portfolios, newsrooms, and cultural institutions that need to systematically track and publish image credits and licences. Site managers who deal with regular contributions from multiple photographers or third-party image sources will get the most value out of the audit and warning features. Small, single-author blogs that rarely worry about image licensing can get by with simpler tools.

Who Should Skip It

Anyone running a personal blog with a few original photos, or sites that already publish attributions manually, will likely find the workflow overhead unnecessary. Users who need advanced digital asset management, automated licence tracking, or integration with stock libraries should look at purpose-built DAM platforms instead.

The Bottom Line

Image Source Control Lite fills a specific niche well: anyone who needs to manage image attributions across a content-heavy site will find the workflow practical and the display options flexible. The overall quality score of 76.87 out of 100 is solid, though the small install base and absence of public support activity make it harder to gauge long-term reliability. It is a sensible choice for its target audience, but those with simpler needs or tighter compliance requirements should weigh the alternatives.

Pick FSM Custom Featured Image Caption instead if you only need captions on featured images and want a lighter plugin with broader install numbers, accepting that it will not manage credits across your full media library.