Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery Security & Risk Analysis

wordpress.org/plugins/gallery-slider-for-woocommerce

🔥 All-in-One WooCommerce Product Image and Video Gallery Solution to Enhance Your Customers' Shopping Experience and Boost Sales Instantly! 🚀

20K active installs v3.1.5 PHP 7.0+ WP 5.3+ Updated Apr 8, 2026
additional-variation-images-galleryproduct-featured-videoproduct-image-zoomwoocommerce-product-gallery-carouselwoocommerce-product-gallery-slider
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery Safe to Use in 2026?

Generally Safe

Score 100/100

Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The 'gallery-slider-for-woocommerce' plugin version 3.1.3 presents a generally positive security posture with several good practices in place. The plugin demonstrates a high percentage of properly escaped output and a reasonable number of nonce and capability checks. The absence of known CVEs and recorded vulnerabilities, along with no critical or high-severity taint flows, suggests a development team that is either proactive in addressing security or has not yet encountered significant issues. The plugin also shows no indication of using outdated bundled libraries or performing file operations, which are common vectors for vulnerabilities.

However, there are notable areas of concern. The presence of two AJAX handlers without authentication checks represents a significant attack surface that could be exploited by unauthenticated users. Additionally, the use of the `unserialize` function, while potentially used in a controlled manner, is a known risk in PHP development and can lead to deserialization vulnerabilities if not handled with extreme caution and input validation. While the SQL query analysis shows a moderate percentage using prepared statements, the remaining queries are a potential risk for SQL injection. The vulnerability history, while currently clean, doesn't guarantee future safety and should be monitored.

In conclusion, the plugin exhibits strengths in output sanitization and a clean vulnerability record. Nevertheless, the unprotected AJAX endpoints and the use of `unserialize` introduce tangible risks that require immediate attention. These specific code-level weaknesses, despite a lack of historical exploits, warrant careful consideration for mitigation.

Key Concerns

  • Unprotected AJAX handlers
  • Use of unserialize function
  • SQL queries not using prepared statements
Vulnerabilities
None known

Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery Release Timeline

v3.1.5Current
v3.1.4
v3.1.3
v3.1.2
v3.1.1
v3.1.0
v3.0.4
v3.0.3
v3.0.2
v3.0.1
v3.0.0
v2.2.1
v2.2.0
v2.1.6
v2.1.5
v2.1.4
v2.1.3
v2.1.2
v2.1.1
v2.1.0
Code Analysis
Analyzed Mar 16, 2026

Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery Code Analysis

Dangerous Functions
1
Raw SQL Queries
8
2 prepared
Unescaped Output
60
638 escaped
Nonce Checks
13
Capability Checks
11
File Operations
0
External Requests
1
Bundled Libraries
0

Dangerous Functions Found

unserialize$plugins = unserialize( $response['body'] );admin\help-page\help.php:116

SQL Query Safety

20% prepared10 total queries

Output Escaping

91% escaped698 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

4 flows
dismiss_offer_banner (admin\partials\class-wgs-offer-banner.php:152)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery Attack Surface

Entry Points10
Unprotected2

AJAX Handlers 8

authwp_ajax_sp-woogs-never-show-review-noticeadmin\partials\class-wgs-admin-notices.php:30
authwp_ajax_dismiss_smart_swatches_noticeadmin\partials\class-wgs-admin-notices.php:31
authwp_ajax_shapedplugin_dismiss_offer_banneradmin\partials\class-wgs-offer-banner.php:34
authwp_ajax_wcgs_run_migrationadmin\partials\shapedplugin-framework\classes\options.class.php:160
authwp_ajax_wcgs-resetadmin\partials\shapedplugin-framework\functions\actions.php:40
authwp_ajax_wcgs-chosenadmin\partials\shapedplugin-framework\functions\actions.php:74
authwp_ajax_wcgs_export_layoutsincludes\class-woo-gallery-slider.php:178
authwp_ajax_wcgs_import_layoutsincludes\class-woo-gallery-slider.php:179

Shortcodes 2

[woogallery] public\class-woo-gallery-slider-public.php:93
[wcgs_gallery_slider] public\class-woo-gallery-slider-public.php:95
WordPress Hooks 52
actionadmin_menuadmin\class-woo-gallery-slider-admin.php:53
actionafter_setup_themeadmin\class-woo-gallery-slider-admin.php:57
filtercustom_menu_orderadmin\class-woo-gallery-slider-admin.php:58
filterpost_row_actionsadmin\class-woo-gallery-slider-admin.php:59
filtermanage_wcgs_layouts_posts_columnsadmin\class-woo-gallery-slider-admin.php:60
actionmanage_wcgs_layouts_posts_custom_columnadmin\class-woo-gallery-slider-admin.php:62
filterpost_updated_messagesadmin\class-woo-gallery-slider-admin.php:63
actionload-post-new.phpadmin\class-woo-gallery-slider-admin.php:64
filteradmin_footer_textadmin\class-woo-gallery-slider-admin.php:65
actionadmin_noticesadmin\partials\class-wgs-admin-notices.php:29
actionadmin_noticesadmin\partials\class-wgs-offer-banner.php:33
actionwp_headadmin\partials\shapedplugin-framework\classes\abstract.class.php:49
actionadd_meta_boxesadmin\partials\shapedplugin-framework\classes\metabox-options.class.php:96
actionsave_postadmin\partials\shapedplugin-framework\classes\metabox-options.class.php:97
actionedit_attachmentadmin\partials\shapedplugin-framework\classes\metabox-options.class.php:98
actionadmin_menuadmin\partials\shapedplugin-framework\classes\options.class.php:157
actionadmin_bar_menuadmin\partials\shapedplugin-framework\classes\options.class.php:158
actionnetwork_admin_menuadmin\partials\shapedplugin-framework\classes\options.class.php:162
filteradmin_footer_textadmin\partials\shapedplugin-framework\classes\options.class.php:822
actionafter_setup_themeadmin\partials\shapedplugin-framework\classes\setup.class.php:84
actioninitadmin\partials\shapedplugin-framework\classes\setup.class.php:85
actionswitch_themeadmin\partials\shapedplugin-framework\classes\setup.class.php:86
actionadmin_enqueue_scriptsadmin\partials\shapedplugin-framework\classes\setup.class.php:87
actioninitblock\variation-images\variation-images.php:28
filterwoocommerce_block_template_area_product-form_after_add_block_product-variation-images-sectionblock\variation-images\variation-images.php:29
filterwoocommerce_rest_prepare_product_variation_objectblock\variation-images\variation-images.php:30
actionwoocommerce_rest_insert_product_variation_objectblock\variation-images\variation-images.php:31
actionplugins_loadedincludes\class-woo-gallery-slider-updates.php:49
filterwoocommerce_product_export_skip_meta_keysincludes\class-woo-gallery-slider-variation-image-import.php:101
filterwoocommerce_csv_product_import_mapping_optionsincludes\class-woo-gallery-slider-variation-image-import.php:109
filterwoocommerce_csv_product_import_mapping_default_columnsincludes\class-woo-gallery-slider-variation-image-import.php:114
actionwoocommerce_product_import_inserted_product_objectincludes\class-woo-gallery-slider-variation-image-import.php:119
actioninitincludes\class-woo-gallery-slider.php:167
actionadmin_enqueue_scriptsincludes\class-woo-gallery-slider.php:168
actionadmin_enqueue_scriptsincludes\class-woo-gallery-slider.php:169
actionwoocommerce_product_after_variable_attributesincludes\class-woo-gallery-slider.php:170
actionwoocommerce_save_product_variationincludes\class-woo-gallery-slider.php:171
actionsave_postincludes\class-woo-gallery-slider.php:172
filterattachment_fields_to_editincludes\class-woo-gallery-slider.php:173
filterupdate_footerincludes\class-woo-gallery-slider.php:174
filteredit_attachmentincludes\class-woo-gallery-slider.php:175
actionwp_enqueue_scriptsincludes\class-woo-gallery-slider.php:194
filterwc_get_templateincludes\class-woo-gallery-slider.php:197
filterblocksy:woocommerce:product-view:use-defaultpublic\class-woo-gallery-slider-public.php:86
actionactivated_pluginpublic\class-woo-gallery-slider-public.php:87
actionwp_enqueue_scriptspublic\class-woo-gallery-slider-public.php:88
filterbody_classpublic\class-woo-gallery-slider-public.php:90
actionwppublic\class-woo-gallery-slider-public.php:102
actionelementor/preview/enqueue_stylespublic\class-woo-gallery-slider-public.php:103
filterwc_get_templatepublic\class-woo-gallery-slider-public.php:211
actionbefore_woocommerce_initwoo-gallery-slider.php:85
actionadmin_noticeswoo-gallery-slider.php:117
Maintenance & Trust

Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery Maintenance & Trust

Maintenance Signals

WordPress version tested7.0
Last updatedApr 8, 2026
PHP min version7.0
Downloads482K

Community Trust

Rating98/100
Number of ratings160
Active installs20K
Developer Profile

Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery Developer Profile

ShapedPlugin LLC

18 plugins · 315K total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
361 days
View full developer profile
Detection Fingerprints

How We Detect Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/gallery-slider-for-woocommerce/assets/css/frontend.css/wp-content/plugins/gallery-slider-for-woocommerce/assets/css/frontend.min.css/wp-content/plugins/gallery-slider-for-woocommerce/assets/js/frontend.js/wp-content/plugins/gallery-slider-for-woocommerce/assets/js/frontend.min.js/wp-content/plugins/gallery-slider-for-woocommerce/assets/css/slick.css/wp-content/plugins/gallery-slider-for-woocommerce/assets/css/slick.min.css/wp-content/plugins/gallery-slider-for-woocommerce/assets/js/slick.min.js/wp-content/plugins/gallery-slider-for-woocommerce/assets/css/magnific-popup.css+2 more
Script Paths
/wp-content/plugins/gallery-slider-for-woocommerce/assets/js/frontend.js/wp-content/plugins/gallery-slider-for-woocommerce/assets/js/slick.min.js/wp-content/plugins/gallery-slider-for-woocommerce/assets/js/magnific-popup.min.js
Version Parameters
gallery-slider-for-woocommerce/assets/css/frontend.css?ver=gallery-slider-for-woocommerce/assets/js/frontend.js?ver=gallery-slider-for-woocommerce/assets/css/slick.css?ver=gallery-slider-for-woocommerce/assets/css/magnific-popup.css?ver=

HTML / DOM Fingerprints

CSS Classes
wgs-slider-wrapperwgs-product-thumbnailswgs-product-thumbnails-itemwgs-variation-gallerywgs-magnific-popupwgs-gallery-sliderwgs-gallery-thumbnailswgs-gallery-item+2 more
HTML Comments
<!-- WooGallery Slider Starts --><!-- WooGallery Slider Ends --><!-- WooGallery Thumbnails Starts --><!-- WooGallery Thumbnails Ends -->
Data Attributes
data-wgs-product-iddata-wgs-variation-iddata-wgs-image-id
JS Globals
window.wgs_frontend_params
FAQ

Frequently Asked Questions about Product Gallery Slider, Additional Variation Images, Product Video, Product Image Zoom and Lightbox for WooCommerce – WooGallery