FooGallery Migrate Security & Risk Analysis

wordpress.org/plugins/foogallery-migrate

Migrate to FooGallery from other gallery plugins like NextGen, Modula, Envira and other gallery plugins.

1K active installs v1.5 PHP 5.4+ WP 6.0+ Updated Feb 23, 2026
galleryimage-gallerymigratephoto-gallerywordpress-gallery-plugin
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is FooGallery Migrate Safe to Use in 2026?

Generally Safe

Score 100/100

FooGallery Migrate has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The foogallery-migrate plugin v1.5 exhibits a generally good security posture, with a strong emphasis on secure coding practices like output escaping and nonce checks. The absence of known CVEs and critical taint analysis results are positive indicators. However, a significant concern arises from the presence of two AJAX handlers that lack authentication checks. This creates a direct attack vector that could be exploited by unauthenticated users, potentially leading to unauthorized actions or data manipulation if these handlers perform sensitive operations. While the overall code quality appears robust, this specific oversight significantly increases the risk profile of the plugin. The plugin's history of no vulnerabilities suggests a proactive approach to security, but the identified unprotected AJAX handlers represent a critical blind spot that needs immediate attention.

Key Concerns

  • Unprotected AJAX handlers
  • SQL queries with less than 100% prepared statements
Vulnerabilities
None known

FooGallery Migrate Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

FooGallery Migrate Release Timeline

v1.5Current
v1.4
v1.3
v1.2
v1.1
v1.0
Code Analysis
Analyzed Mar 16, 2026

FooGallery Migrate Code Analysis

Dangerous Functions
0
Raw SQL Queries
19
10 prepared
Unescaped Output
27
204 escaped
Nonce Checks
17
Capability Checks
17
File Operations
4
External Requests
1
Bundled Libraries
0

SQL Query Safety

34% prepared29 total queries

Output Escaping

88% escaped231 total outputs
Data Flows · Security
6 unsanitized

Data Flow Analysis

6 flows6 with unsanitized paths
render_album_form (includes\migrators\class-album-migrator.php:28)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

FooGallery Migrate Attack Surface

Entry Points16
Unprotected2

AJAX Handlers 16

authwp_ajax_foogallery_migrateincludes\class-init.php:30
authwp_ajax_foogallery_migrate_continueincludes\class-init.php:31
authwp_ajax_foogallery_migrate_cancelincludes\class-init.php:32
authwp_ajax_foogallery_migrate_resetincludes\class-init.php:33
authwp_ajax_foogallery_migrate_refreshincludes\class-init.php:34
authwp_ajax_foogallery_migrate_retry_galleryincludes\class-init.php:35
authwp_ajax_foogallery_migrate_check_gallery_errorsincludes\class-init.php:36
authwp_ajax_foogallery_album_migrateincludes\class-init.php:40
authwp_ajax_foogallery_album_migrate_continueincludes\class-init.php:41
authwp_ajax_foogallery_album_migrate_cancelincludes\class-init.php:42
authwp_ajax_foogallery_album_migrate_resetincludes\class-init.php:43
authwp_ajax_foogallery_album_migrate_refreshincludes\class-init.php:44
authwp_ajax_foogallery_content_replaceincludes\class-init.php:47
authwp_ajax_foogallery_content_refreshincludes\class-init.php:48
authwp_ajax_foogallery_migrate_update_statusincludes\class-init.php:51
authwp_ajax_foogallery_migrate_delete_objectincludes\class-init.php:52
WordPress Hooks 4
actionadmin_noticesincludes\class-init.php:25
actionfoogallery_admin_menu_afterincludes\class-init.php:27
actionadmin_noticesincludes\startup-checks.php:41
actionadmin_noticesincludes\startup-checks.php:48
Maintenance & Trust

FooGallery Migrate Maintenance & Trust

Maintenance Signals

WordPress version tested7.0
Last updatedFeb 23, 2026
PHP min version5.4
Downloads11K

Community Trust

Rating100/100
Number of ratings1
Active installs1K
Developer Profile

FooGallery Migrate Developer Profile

FooPlugins

5 plugins · 204K total installs

76
trust score
Avg Security Score
96/100
Avg Patch Time
328 days
View full developer profile
Detection Fingerprints

How We Detect FooGallery Migrate

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/foogallery-migrate/assets/css/foogallery-migrate.css/wp-content/plugins/foogallery-migrate/assets/js/foogallery-migrate.js
Script Paths
/wp-content/plugins/foogallery-migrate/assets/js/foogallery-migrate.js
Version Parameters
foogallery-migrate/assets/css/foogallery-migrate.css?ver=foogallery-migrate/assets/js/foogallery-migrate.js?ver=

HTML / DOM Fingerprints

CSS Classes
foogallery-migrate-admin-wrapfoogallery-migrate-import-options
HTML Comments
<!-- FooGallery Migrate -->
Data Attributes
data-migrated-iddata-migration-type
JS Globals
FooGalleryMigrate
FAQ

Frequently Asked Questions about FooGallery Migrate