Photo Gallery by Ays – Responsive Image Gallery Security & Risk Analysis

The "gallery-photo-gallery" plugin version 6.6.4 exhibits a mixed security posture. While it demonstrates several good security practices, such as a high percentage of prepared SQL statements and a significant number of nonce and capability checks, there are notable areas of concern. The presence of 11 AJAX handlers without authentication checks presents a considerable attack surface, increasing the risk of unauthorized actions. The taint analysis reveals 3 high-severity flows with unsanitized paths, indicating potential vulnerabilities that could be exploited if user input is not properly handled. The plugin's historical vulnerability record is concerning, with 10 known CVEs, including past critical and high-severity issues like injection and XSS. The fact that the last recorded vulnerability was in 2025 suggests a recent history of security flaws, even if none are currently unpatched in this specific version. This history, coupled with the identified code signals, points to a plugin that requires careful attention to its security implementation and ongoing maintenance. The plugin shows strengths in database query security and authorization checks, but weaknesses in handling AJAX entry points and sanitizing data flows. Users should be aware of the potential risks associated with the exposed AJAX handlers and the implications of the plugin's past vulnerability trends.