Gallery – Photo Albums Plugin Security & Risk Analysis

The "easy-media-gallery" plugin v1.3.170 exhibits a mixed security posture. While it demonstrates good practices in SQL query handling with 100% prepared statements and a significant number of nonce and capability checks (9 and 10 respectively), several critical areas raise concerns. The presence of dangerous functions like 'unserialize' and 'create_function' is a significant red flag, as these are often associated with deserialization vulnerabilities and code injection risks. Furthermore, the taint analysis revealing two high-severity flows with unsanitized paths indicates potential vulnerabilities where external input could be manipulated to execute unintended code or access unauthorized resources.

The plugin's vulnerability history, with four known medium-severity CVEs including a recent one in March 2025, suggests a recurring pattern of security weaknesses, particularly in Cross-site Scripting (XSS) and Cross-Site Request Forgery (CSRF). The fact that one CVE remains unpatched is a critical concern, leaving active exploits possible. The high percentage of improperly escaped output (82%) directly contributes to XSS risks, as user-supplied data is not adequately sanitized before being displayed to other users.

In conclusion, despite strengths in database security and input validation for certain functions, the "easy-media-gallery" plugin has significant security shortcomings. The presence of dangerous functions, high-severity taint flows, a history of multiple vulnerabilities, and a high rate of unescaped output collectively point to a substantial risk. Users should be cautious, and prompt patching of the known unpatched CVE is essential.