Photo Gallery – Responsive Image Galleries by Supsystic Security & Risk Analysis

The "gallery-by-supsystic" plugin version 1.15.33 exhibits a mixed security posture. On the positive side, the vast majority of SQL queries utilize prepared statements, and almost all output is properly escaped, indicating good practices in handling data and preventing common web vulnerabilities like XSS. The plugin also demonstrates a reasonable number of capability checks and nonce checks overall.

However, significant concerns arise from the identified attack surface. With two unprotected AJAX handlers, there are clear opportunities for unauthenticated attackers to interact with sensitive plugin functionalities. This is a critical weakness, especially when combined with the presence of the `unserialize` function, which can be a gateway to remote code execution if not handled with extreme care and input validation. Taint analysis did not reveal any immediate issues, but the lack of thorough taint analysis (0 flows analyzed) means this is not a definitive sign of safety.

The plugin's vulnerability history is also a point of concern. With three known CVEs, including one high and two medium severity vulnerabilities, it suggests a pattern of past security weaknesses. While there are currently no unpatched vulnerabilities, the recurring nature of past issues, particularly Cross-Site Scripting and CSRF, warrants vigilance. The most recent vulnerability being in March 2024 indicates that this plugin has been a target for security researchers. The combination of unprotected entry points and a history of vulnerabilities leads to a moderate to high risk assessment.