Advance Portfolio Grid, Slider and Gallery – Showcase Projects, Images and Videos Security & Risk Analysis

wordpress.org/plugins/advance-portfolio-grid

Create responsive and customizable portfolio grids to showcase projects, case studies, and creative work on your WordPress site.

900 active installs v1.07.7 PHP 7.4+ WP 6.7+ Updated Mar 13, 2026
portfolioportfolio-galleryportfolio-gridportfolio-sliderwordpress-portfolio-plugin
99
A · Safe
CVEs total1
Unpatched0
Last CVESep 22, 2025
Safety Verdict

Is Advance Portfolio Grid, Slider and Gallery – Showcase Projects, Images and Videos Safe to Use in 2026?

Generally Safe

Score 99/100

Advance Portfolio Grid, Slider and Gallery – Showcase Projects, Images and Videos has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Sep 22, 2025Updated 21d ago
Risk Assessment

The "advance-portfolio-grid" plugin version 1.07.7 exhibits a generally positive security posture based on the static analysis. The absence of dangerous functions, SQL injection risks (all queries are prepared), file operations, and external HTTP requests are strong indicators of good secure coding practices. The plugin also demonstrates an awareness of security by implementing nonce and capability checks, and a high percentage of properly escaped output, which significantly reduces the risk of Cross-Site Scripting (XSS) vulnerabilities. The static analysis found no taint flows, further reinforcing its current security. However, a single medium severity Cross-Site Scripting vulnerability was recorded in its history. While currently patched, this history suggests a recurring pattern of input sanitization issues, even if the latest version appears to have addressed it. The presence of a shortcode as the only entry point, which is not explicitly listed as unprotected in the static analysis, presents a potential, albeit small, attack vector if input validation within the shortcode is imperfect.

Key Concerns

  • Medium severity XSS vulnerability in history
  • Potential for unvalidated shortcode input
Vulnerabilities
1

Advance Portfolio Grid, Slider and Gallery – Showcase Projects, Images and Videos Security Vulnerabilities

CVEs by Year

1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2025-57982medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advance Portfolio Grid <= 1.07.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

Sep 22, 2025 Patched in 1.07.7 (60d)
Code Analysis
Analyzed Mar 16, 2026

Advance Portfolio Grid, Slider and Gallery – Showcase Projects, Images and Videos Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
17
112 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

87% escaped129 total outputs
Attack Surface

Advance Portfolio Grid, Slider and Gallery – Showcase Projects, Images and Videos Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[wpb-portfolio] inc\wpb-fp-shortcode.php:235
WordPress Hooks 29
actionadmin_enqueue_scriptsadmin\wpb-class.settings-api.php:32
actionmanage_wpb_fp_portfolio_posts_columnsadmin\wpb-fp-admin.php:17
actionmanage_wpb_fp_portfolio_posts_custom_columnadmin\wpb-fp-admin.php:37
actionadmin_initadmin\wpb-settings-config.php:25
actionadmin_menuadmin\wpb-settings-config.php:26
filterimage_resize_dimensionsadmin\wpb_aq_resizer.php:62
actioninitinc\wpb-fp-post-type.php:57
actionafter_setup_themeinc\wpb-fp-post-type.php:71
actioninitinc\wpb-fp-post-type.php:117
actionrestrict_manage_postsinc\wpb-fp-post-type.php:124
actionwpb_fp_settings_contentinc\wpb-functions.php:75
actionelementor/initinc\wpb_fp_elementor.php:8
actionelementor/widgets/widgets_registeredinc\wpb_fp_elementor.php:43
actionelementor/frontend/after_register_scriptsinc\wpb_fp_elementor.php:44
actionelementor/frontend/after_enqueue_scriptsinc\wpb_fp_elementor.php:45
actionelementor/editor/after_enqueue_scriptsinc\wpb_fp_elementor.php:46
actionelementor/frontend/after_register_stylesinc\wpb_fp_elementor.php:47
actionelementor/frontend/after_enqueue_stylesinc\wpb_fp_elementor.php:48
actionload-post.phpinc\wpb_fp_metabox.php:5
actionload-post-new.phpinc\wpb_fp_metabox.php:6
actionadd_meta_boxesinc\wpb_fp_metabox.php:12
actionadd_meta_boxesinc\wpb_fp_metabox.php:13
actionsave_postinc\wpb_fp_metabox.php:16
actionwp_enqueue_scriptsinc\wpb_scripts.php:80
actionadmin_enqueue_scriptsinc\wpb_scripts.php:95
actionadmin_noticesmain.php:43
actionadmin_noticesmain.php:114
actionadmin_initmain.php:115
actionplugins_loadedmain.php:131
Maintenance & Trust

Advance Portfolio Grid, Slider and Gallery – Showcase Projects, Images and Videos Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 13, 2026
PHP min version7.4
Downloads79K

Community Trust

Rating86/100
Number of ratings32
Active installs900
Developer Profile

Advance Portfolio Grid, Slider and Gallery – Showcase Projects, Images and Videos Developer Profile

WPBean

25 plugins · 40K total installs

91
trust score
Avg Security Score
96/100
Avg Patch Time
20 days
View full developer profile
Detection Fingerprints

How We Detect Advance Portfolio Grid, Slider and Gallery – Showcase Projects, Images and Videos

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/advance-portfolio-grid/inc/wpb_scripts.php/wp-content/plugins/advance-portfolio-grid/inc/wpb-fp-shortcode.php/wp-content/plugins/advance-portfolio-grid/inc/wpb-fp-post-type.php/wp-content/plugins/advance-portfolio-grid/admin/wpb_aq_resizer.php/wp-content/plugins/advance-portfolio-grid/admin/wpb-fp-admin.php/wp-content/plugins/advance-portfolio-grid/admin/wpb-class.settings-api.php/wp-content/plugins/advance-portfolio-grid/admin/wpb-settings-config.php/wp-content/plugins/advance-portfolio-grid/inc/wpb-functions.php+2 more
Script Paths
wp-color-pickerwp-mediawp-color-pickerjquery
Version Parameters
advance-portfolio-grid/main.php?ver=advance-portfolio-grid/inc/wpb_scripts.php?ver=advance-portfolio-grid/inc/wpb-fp-shortcode.php?ver=advance-portfolio-grid/inc/wpb-fp-post-type.php?ver=advance-portfolio-grid/admin/wpb_aq_resizer.php?ver=advance-portfolio-grid/admin/wpb-fp-admin.php?ver=advance-portfolio-grid/admin/wpb-class.settings-api.php?ver=advance-portfolio-grid/admin/wpb-settings-config.php?ver=advance-portfolio-grid/inc/wpb-functions.php?ver=advance-portfolio-grid/inc/wpb_fp_metabox.php?ver=advance-portfolio-grid/inc/wpb_fp_elementor.php?ver=

HTML / DOM Fingerprints

CSS Classes
wpb-fp-discount-notice
Shortcode Output
[wpb-portfolio]
FAQ

Frequently Asked Questions about Advance Portfolio Grid, Slider and Gallery – Showcase Projects, Images and Videos