PlugUpp Link & Image Health Audit is a broken link checker that checks the links and images your visitors actually see. It finds broken links, broken images, mixed content and SSL problems by rendering each of your own pages through the normal front-end pipeline and inspecting the final HTML – so it
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 6.2 and PHP 7.4.
SourceWordPress plugins · Nov 13, 2026
01 / Source details
Aboutthistool.
PlugUpp Link & Image Health Audit is a broken link checker that checks the links and images your visitors actually see. It finds broken links, broken images, mixed content and SSL problems by rendering each of your own pages through the normal front-end pipeline and inspecting the final HTML – so it catches links and images injected by themes, menus, widgets, footers and page builders that database-only checkers miss.
Everything runs on your own server. There is no external crawler and no per-link quota. Link checks run on your own server. No page content or link data leaves your site unless you turn on the premium Safe Browsing check, which sends external URLs to Google. If you opt in, the plugin sends PlugUpp a weekly summary of which settings you changed, never content or addresses.
Upgrade to Premium for a Learning Engine that tunes itself to your site, scheduled scans and email reports, change detection, soft-error and Safe Browsing checks, rule-based exclusions and CSV export. See plans and pricing
What you get on the free plan
Rendered-page scanning – checks the links and images that actually ship to visitors, including those added by your theme, menus, widgets, footers and page builder that database-only checkers never see
Links, images and resources – internal and external links, images, and page resources (CSS, JS, icons, fonts)
All your content types – posts, pages, and any public custom post type, including WooCommerce products
Unpublished content too – optionally scan drafts, scheduled, pending and private content, so links are checked before they go live
Clear verdicts – broken links and images, SSL and certificate problems, permanent and temporary redirects, and hosts that refuse automated visitors, counted separately as “Not checkable” rather than reported as broken
Mixed content detection – flags images, embeds and page resources that load over plain HTTP on your HTTPS site, which browsers block or downgrade
Archived-copy links – every broken external link gets a “View archived copy” link to the Wayback Machine, so you can see what the dead page said or pick a replacement
By URL and By page views – sorted worst-first, with separate Issues, Warnings and Notices counts so you can triage at a glance
Drill-down with evidence – see exactly which pages a broken URL appears on, and open the page source with the offending link or image highlighted in context
URL parameter handling – cache-busters and tracking tags (ver, utm_source, fbclid and the like) are ignored so the same resource is not counted as many different URLs; the common ones are pre-filled, and you can add your own
Exclude and ignore – exclude pages from scanning individually, from the Exclusions screen, or in bulk from the standard Posts and Pages screens; ignore individual URLs
Built-in log viewer – the log is kept in your WordPress database, with a viewer on the Logs tab and a setting for how long entries are kept
No quotas, checks stay local – scan as much as you like. Link checks run on your own server. No page content or link data leaves your site unless you turn on the premium Safe Browsing check
Password-protected content is never scanned – there is no way to render it without the password. Unpublished content is off by default; when you enable it, drafts, scheduled, pending and private posts are rendered privately for the scan only and never shown to visitors.
What Premium adds
The premium version is a separate plugin, delivered from plugupp.com, that adds intelligence, automation and reporting – still entirely on your own server.
URL Parameter Learning Engine – watches the parameters in your own scans and suggests the cache-busters and tracking tags worth ignoring, each with evidence, a live example you can open both ways, and a one-click add
Image alt-text audit – finds images with missing, empty or suspicious alternative text on the rendered page – including the media-library divergences no database tool can see – with WCAG-anchored findings and review tiers
Scheduled scans – run scans automatically on the schedule you choose, on standard WordPress cron
Email reports – get the results by email, every run or only when something needs attention
Change detection – a changes-since-last-scan digest: what newly broke, what changed, what got fixed
Soft-error detection – catches pages that return 200 OK but actually show an error, a parked domain or an expired-site notice
Google Safe Browsing checks – check external destinations against Google’s malware and phishing lists, with your own API key
Rule-based exclusions – auto-exclude whole patterns of content by post type, category or tag, author, or URL shape; save rule sets and carry them between sites
One-click filters and CSV export – narrow any view to a specific issue type and export it
Multi-site licences – one licence covers 1, 3, 5 or unlimited sites
See the full plan comparison and pricing
External services
This plugin connects to the following external services.
Link and image URLs found on your pages
Checking a link or image means requesting the URL to see whether it resolves. This is the core function of the plugin.
When data is sent: during a scan, for every unique external link, image or resource URL found in your pages’ rendered output.
What data is sent: nothing beyond the HTTP request to the URL itself, made only to read its response status (for example 200, 404, or a redirect). Only URLs that already appear on your own pages are contacted. Internal links are checked against your own server.
The plugin also renders your own pages by requesting them on your own server (a self-request); that is your site contacting itself, not a third-party service.
Google Safe Browsing (Premium, optional)
If you enable Safe Browsing checks and provide your own Google API key, the plugin checks external link destinations against the Google Safe Browsing threat lists.
When data is sent: during a scan, only when you have entered a Google API key. With no key, this feature is off and nothing is sent.
What data is sent: the external URLs found in your scan are sent to the Google Safe Browsing Lookup API to check them against Google’s malware and phishing lists.
If you allow it, the plugin sends PlugUpp a summary of which settings you change and which plugin screens you open, with no content, addresses or names, to https://usage.plugupp.com. It helps us simplify the plugin. It is part of the PlugUpp opt-in you can decline, and you can turn it off at any time on the plugin’s Logs tab.
When data is sent: only if you opted in to the plugin’s Freemius connection, where “Settings usage” is listed, and “Share settings usage” on the plugin’s Logs tab is on (it is on after you opt in, and you can turn it off there at any time). Once a week, and once within a day of saving the plugin’s settings. Never when a visitor views your site. Turning it off, or opting out of the connection, stops sending and sends one request to delete what was stored for this install.
What data is sent: the plugin’s name, version and plan (free or premium), the WordPress and PHP versions, a random install ID made on your site, which settings differ from their defaults (for a setting with a fixed set of options, the option chosen; for text and lists, only that it changed and how many items it holds), how often each settings group and tab was opened, and when the setup steps were completed, counted from when the plugin first ran.
What is never sent: your site address, email addresses, names, page or post content, passwords or keys, or any Freemius identifier. The service does not store your IP address.
Terms of service: https://plugupp.com/terms-of-service/
The plugin uses the Freemius platform for licence activation, plan changes, plugin updates (for paid plans), and as the Merchant of Record for purchases.
When data is sent: on first plugin activation as part of the user-consented opt-in flow, on licence activation or deactivation, on plugin update checks (paid plans), and on uninstall (for optional feedback). Sending the initial opt-in data is the user’s choice – declining the opt-in still lets the plugin work in full. Scanning is fully local and never requires the connection.
What data is sent: standard Freemius opt-in data including site URL, administrator email address, WordPress version, PHP version, plugin version, and active theme name.
Terms of service: https://freemius.com/terms/
Privacy policy: https://freemius.com/privacy/
See it in action
Screenshots & previews.
The dashboard - scan controls, the colour-coded Issues, Warnings and Notices summary, and the By URL results listing every unique link and image with its verdict, with hosts that refuse automated visitors counted separately as Not checkable.The By page view - every scanned page with its Issues, Warnings and Notices counts, sorted worst-first for fast triage.Finding details - a broken URL with the pages it appears on and quick actions, so you can jump straight to the page or view the source.View source - the page re-rendered with the exact broken link or image highlighted in context, so you can see where it lives.The Exclusions screen - the pages you have excluded from scanning, with rule-based auto-exclusion on paid plans.Settings - choose which content types are scanned in one list, with link checking and scan speed folded under their headings until you need them.The URL Parameter Learning Engine (Premium) - suggested parameters with the evidence, a live example you can open both ways, and a one-click add.The Images view (Premium) - every image whose alternative text needs attention, as it was actually rendered, with a plain-English explanation and the WCAG technique behind each finding.The Not checkable view - links whose host refused our automated request, counted separately from real problems rather than reported as broken, each saying what was actually observed, with a one-click way to confirm the link yourself.
02 / Source details
Gettingstarted.
01Install from the WordPress.org plugin directory (Plugins > Add New), or upload the plugin ZIP (Plugins > Add New > Upload).
02Activate the plugin.
03Open the Link Health screen and click “Scan now” in the Scan your site step to check the links and images on your pages and posts. You can leave the page. The scan continues in the background.
04Review the By URL and By page tabs, and open any finding to see where it appears and view the source.
03 / Source details
Frequently asked questions.
How is this different from other broken link checkers?
Most checkers read links out of your database. This plugin renders each page the way a visitor’s browser would and checks the links and images that actually ship – including ones added by your theme, menus, widgets, footers and page builder, which database-only checkers never see. It runs entirely on your own server, with no external crawler and no per-link quota.
Does it crawl my site?
No. It audits only your known WordPress content and the links and images those pages output. It never follows links to discover new URLs like a crawler.
Does it send my site anywhere?
No. Scanning is local. To check whether an external link or image works, the plugin requests that URL directly from your server – but only URLs that already appear on your pages, and only to read their response. Google Safe Browsing checks are a Premium, opt-in feature that requires your own Google API key; without one, nothing is sent to Google.
Is the free plugin limited?
No. It is fully functional with no limits: it scans all your content – posts, pages, custom post types and WooCommerce products, and optionally unpublished content – and checks every link, image and resource. The premium version is a separate plugin, delivered from plugupp.com, that adds the Learning Engine, scheduled scans and email reports, change detection, soft-error and Safe Browsing checks, rule-based exclusions and CSV export. See the full plan comparison
Are private or password-protected pages checked?
Password-protected pages are never scanned – there is no way to render them without the password. Private, draft, scheduled and pending content is skipped by default, but you can include it by enabling Unpublished content in Settings; it is rendered privately for the scan only and never shown to visitors. Make a page public (or remove its password) and it is picked up on the next scan.
A link shows as “Not checkable” rather than broken. What does that mean?
Plenty of large sites refuse automated requests while serving people normally – review sites, marketplaces, forums and social platforms all do it. The plugin tells these apart from genuine failures and counts them under “Not checkable” rather than as issues, so you are not chasing false positives. You can open the link, confirm it works and mark it checked in one click.
FinderPress Media Auditor helps site administrators scan for broken images, missing Media Library files, unreachable media URLs, and other media issues across WordPress content. Use it to audit images, video, audio, PDFs, featured images, and attachment files without sending scan data to an external
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
