Portfolio Grid – Filterable Gallery, Grid & Slider Showcase Security & Risk Analysis

wordpress.org/plugins/advance-portfolio-grid

Create responsive and customizable portfolio grids to showcase projects, case studies, and creative work on your WordPress site.

1K active installs v1.07.7 PHP 7.4+ WP 6.7+ Updated Mar 23, 2026
portfolioportfolio-galleryportfolio-gridportfolio-sliderwordpress-portfolio-plugin
99
A · Safe
CVEs total1
Unpatched0
Last CVESep 22, 2025
Safety Verdict

Is Portfolio Grid – Filterable Gallery, Grid & Slider Showcase Safe to Use in 2026?

Generally Safe

Score 99/100

Portfolio Grid – Filterable Gallery, Grid & Slider Showcase has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Sep 22, 2025Updated 1mo ago
Risk Assessment

The "advance-portfolio-grid" plugin version 1.07.7 exhibits a generally positive security posture based on the static analysis. The absence of dangerous functions, SQL injection risks (all queries are prepared), file operations, and external HTTP requests are strong indicators of good secure coding practices. The plugin also demonstrates an awareness of security by implementing nonce and capability checks, and a high percentage of properly escaped output, which significantly reduces the risk of Cross-Site Scripting (XSS) vulnerabilities. The static analysis found no taint flows, further reinforcing its current security. However, a single medium severity Cross-Site Scripting vulnerability was recorded in its history. While currently patched, this history suggests a recurring pattern of input sanitization issues, even if the latest version appears to have addressed it. The presence of a shortcode as the only entry point, which is not explicitly listed as unprotected in the static analysis, presents a potential, albeit small, attack vector if input validation within the shortcode is imperfect.

Key Concerns

  • Medium severity XSS vulnerability in history
  • Potential for unvalidated shortcode input
Vulnerabilities
1 published

Portfolio Grid – Filterable Gallery, Grid & Slider Showcase Security Vulnerabilities

CVEs by Year

1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2025-57982medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advance Portfolio Grid <= 1.07.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

Sep 22, 2025 Patched in 1.07.7 (60d)
Version History

Portfolio Grid – Filterable Gallery, Grid & Slider Showcase Release Timeline

v1.07.7Current
v1.07.61 CVE
v1.07.51 CVE
v1.07.41 CVE
v1.07.31 CVE
v1.07.21 CVE
v1.07.11 CVE
v1.07.01 CVE
v1.06.91 CVE
Code Analysis
Analyzed Mar 16, 2026

Portfolio Grid – Filterable Gallery, Grid & Slider Showcase Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
17
112 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

87% escaped129 total outputs
Attack Surface

Portfolio Grid – Filterable Gallery, Grid & Slider Showcase Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[wpb-portfolio] inc\wpb-fp-shortcode.php:235
WordPress Hooks 29
actionadmin_enqueue_scriptsadmin\wpb-class.settings-api.php:32
actionmanage_wpb_fp_portfolio_posts_columnsadmin\wpb-fp-admin.php:17
actionmanage_wpb_fp_portfolio_posts_custom_columnadmin\wpb-fp-admin.php:37
actionadmin_initadmin\wpb-settings-config.php:25
actionadmin_menuadmin\wpb-settings-config.php:26
filterimage_resize_dimensionsadmin\wpb_aq_resizer.php:62
actioninitinc\wpb-fp-post-type.php:57
actionafter_setup_themeinc\wpb-fp-post-type.php:71
actioninitinc\wpb-fp-post-type.php:117
actionrestrict_manage_postsinc\wpb-fp-post-type.php:124
actionwpb_fp_settings_contentinc\wpb-functions.php:75
actionelementor/initinc\wpb_fp_elementor.php:8
actionelementor/widgets/widgets_registeredinc\wpb_fp_elementor.php:43
actionelementor/frontend/after_register_scriptsinc\wpb_fp_elementor.php:44
actionelementor/frontend/after_enqueue_scriptsinc\wpb_fp_elementor.php:45
actionelementor/editor/after_enqueue_scriptsinc\wpb_fp_elementor.php:46
actionelementor/frontend/after_register_stylesinc\wpb_fp_elementor.php:47
actionelementor/frontend/after_enqueue_stylesinc\wpb_fp_elementor.php:48
actionload-post.phpinc\wpb_fp_metabox.php:5
actionload-post-new.phpinc\wpb_fp_metabox.php:6
actionadd_meta_boxesinc\wpb_fp_metabox.php:12
actionadd_meta_boxesinc\wpb_fp_metabox.php:13
actionsave_postinc\wpb_fp_metabox.php:16
actionwp_enqueue_scriptsinc\wpb_scripts.php:80
actionadmin_enqueue_scriptsinc\wpb_scripts.php:95
actionadmin_noticesmain.php:43
actionadmin_noticesmain.php:114
actionadmin_initmain.php:115
actionplugins_loadedmain.php:131
Maintenance & Trust

Portfolio Grid – Filterable Gallery, Grid & Slider Showcase Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 23, 2026
PHP min version7.4
Downloads79K

Community Trust

Rating86/100
Number of ratings32
Active installs1K
Developer Profile

Portfolio Grid – Filterable Gallery, Grid & Slider Showcase Developer Profile

WPBean

26 plugins · 39K total installs

91
trust score
Avg Security Score
96/100
Avg Patch Time
20 days
View full developer profile
Detection Fingerprints

How We Detect Portfolio Grid – Filterable Gallery, Grid & Slider Showcase

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/advance-portfolio-grid/inc/wpb_scripts.php/wp-content/plugins/advance-portfolio-grid/inc/wpb-fp-shortcode.php/wp-content/plugins/advance-portfolio-grid/inc/wpb-fp-post-type.php/wp-content/plugins/advance-portfolio-grid/admin/wpb_aq_resizer.php/wp-content/plugins/advance-portfolio-grid/admin/wpb-fp-admin.php/wp-content/plugins/advance-portfolio-grid/admin/wpb-class.settings-api.php/wp-content/plugins/advance-portfolio-grid/admin/wpb-settings-config.php/wp-content/plugins/advance-portfolio-grid/inc/wpb-functions.php+2 more
Script Paths
wp-color-pickerwp-mediawp-color-pickerjquery
Version Parameters
advance-portfolio-grid/main.php?ver=advance-portfolio-grid/inc/wpb_scripts.php?ver=advance-portfolio-grid/inc/wpb-fp-shortcode.php?ver=advance-portfolio-grid/inc/wpb-fp-post-type.php?ver=advance-portfolio-grid/admin/wpb_aq_resizer.php?ver=advance-portfolio-grid/admin/wpb-fp-admin.php?ver=advance-portfolio-grid/admin/wpb-class.settings-api.php?ver=advance-portfolio-grid/admin/wpb-settings-config.php?ver=advance-portfolio-grid/inc/wpb-functions.php?ver=advance-portfolio-grid/inc/wpb_fp_metabox.php?ver=advance-portfolio-grid/inc/wpb_fp_elementor.php?ver=

HTML / DOM Fingerprints

CSS Classes
wpb-fp-discount-notice
Shortcode Output
[wpb-portfolio]
FAQ

Frequently Asked Questions about Portfolio Grid – Filterable Gallery, Grid & Slider Showcase