Gallery One Security & Risk Analysis

wordpress.org/plugins/gallery-one

A cool responsive gallery plugin with beautifully views.

50 active installs v1.0.2 PHP + WP 4.5+ Updated May 28, 2016
facebookgalleriesgalleryimageimages
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Gallery One Safe to Use in 2026?

Generally Safe

Score 85/100

Gallery One has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The gallery-one plugin v1.0.2 exhibits a generally good security posture based on the provided static analysis. It demonstrates strong adherence to secure coding practices, with no dangerous functions identified, all SQL queries utilizing prepared statements, and a high percentage of properly escaped output. The absence of file operations and external HTTP requests further reduces potential attack vectors. Crucially, the plugin incorporates nonce and capability checks, indicating an awareness of common WordPress security mechanisms.

Key Concerns

  • AJAX handler without authentication check
Vulnerabilities
None known

Gallery One Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Gallery One Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
8
67 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

89% escaped75 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<edit> (admin\edit.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

Gallery One Attack Surface

Entry Points2
Unprotected1

AJAX Handlers 1

authwp_ajax_gallery_one_get_editor_preview_thumbsadmin\class-admin.php:22

Shortcodes 1

[gallery_one] inc\class-shortcode.php:195
WordPress Hooks 15
actionadmin_enqueue_scriptsadmin\class-admin.php:14
actionsave_postadmin\class-admin.php:15
actionedit_form_after_editoradmin\class-admin.php:16
filtermanage_go_album_posts_columnsadmin\class-admin.php:19
actionmanage_go_album_posts_custom_columnadmin\class-admin.php:20
actionmedia_buttonsadmin\editor.php:8
actionafter_wp_tiny_mceadmin\editor.php:9
actionadmin_enqueue_scriptsadmin\editor.php:10
actionadmin_enqueue_scriptsadmin\editor.php:11
actionadmin_initadmin\editor.php:12
filtermce_external_pluginsadmin\editor.php:32
actionwp_footerinc\class-shortcode.php:204
actioninitinit.php:28
actionwp_enqueue_scriptsinit.php:30
actionplugins_loadedinit.php:228
Maintenance & Trust

Gallery One Maintenance & Trust

Maintenance Signals

WordPress version tested4.5.33
Last updatedMay 28, 2016
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs50
Developer Profile

Gallery One Developer Profile

shrimp2t

2 plugins · 50 total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Gallery One

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/gallery-one/assets/css/frontend.css/wp-content/plugins/gallery-one/assets/justified-gallery/justifiedGallery.min.css/wp-content/plugins/gallery-one/assets/lightgallery/css/lightgallery.css
Script Paths
/wp-content/plugins/gallery-one/assets/justified-gallery/jquery.justifiedGallery.min.js/wp-content/plugins/gallery-one/assets/lightgallery/js/lightgallery-all.min.js/wp-content/plugins/gallery-one/assets/js/frontend.js
Version Parameters
gallery-one/assets/css/frontend.css?ver=gallery-one/assets/justified-gallery/justifiedGallery.min.css?ver=gallery-one/assets/lightgallery/css/lightgallery.css?ver=gallery-one/assets/justified-gallery/jquery.justifiedGallery.min.js?ver=gallery-one/assets/lightgallery/js/lightgallery-all.min.js?ver=gallery-one/assets/js/frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
gallery-one-album-wrapgallery-one-single-gallerygo_album
Data Attributes
data-gallery-iddata-gallery-layoutdata-gallery-settings
JS Globals
galleryOne
Shortcode Output
[gallery-one id=[gallery_one id=
FAQ

Frequently Asked Questions about Gallery One