I can’t fix this, unfortunately. Image titles are written in the posts’ content and aren’t stored in any table.
For performance reason, my queries don’t return the posts’ content, so I can’t parse it to retrieve the titles.
I guess I’ll leave the filenames then. Even tho this information is rarely valuable… 
Non-modified filenames most of the time just reveal where the image comes from and nothing more.
For example in my test instance:
-
image.png→ “image” filenames are images pasted directly in the composer -
Gemini_Generated_Image_8h4wt58h4wt58h4w.jpg→ Guess -
ComfyUI-ExtraMD-Large_315126945425344_00000.jpg→ Local AI image generator -
the-tattooer-is-totally-right-v0-s2f8spm3l-D5908.jpg→ Probably saved from a website -
cropped-android-chrome-512x512-1-32x32.png→ Smartphone screenshot
Etc.
Should I consider it as a sensitive information? Image names are used by default for titles when we upload them on Discourse. If we edit the titles, the original information is unavailable for users. Yet, this plugin discloses it.
Edit: Yeah, I should probably not display the original filename.
Re-edit: Fixed. 