TechGasp Photo Master Security & Risk Analysis

wordpress.org/plugins/instagram-master

TechGasp Photo Master let's your show your latest Instagram photos and View on Instagram Button inside any widget position.

20 active installs v5.1.4 PHP + WP 3.5+ Updated Mar 11, 2021
instagramphotopicturesharingtechgasp
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is TechGasp Photo Master Safe to Use in 2026?

Generally Safe

Score 85/100

TechGasp Photo Master has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago
Risk Assessment

The "instagram-master" plugin v5.1.4 exhibits a mixed security posture. While the static analysis reveals a very small attack surface with no apparent direct entry points like AJAX handlers, REST API routes, or shortcodes, and all SQL queries use prepared statements, significant concerns arise from the output escaping and taint analysis. The complete absence of output escaping (0% properly escaped) is a critical vulnerability, exposing users to cross-site scripting (XSS) attacks whenever plugin output is rendered. Furthermore, the taint analysis shows two flows with unsanitized paths, although they are not classified as critical or high severity, this still indicates potential for unintended data handling. The lack of any recorded vulnerability history, while seemingly positive, could also suggest a lack of rigorous security auditing or a platform that hasn't been targeted, rather than inherent security. Overall, the lack of output escaping is a severe weakness that overshadows the otherwise clean code in terms of SQL and the minimal attack surface.

Key Concerns

  • Output escaping is completely missing
  • Taint flows with unsanitized paths
  • No capability checks implemented
  • No nonce checks implemented
Vulnerabilities
None known

TechGasp Photo Master Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

TechGasp Photo Master Release Timeline

v5.1.4Current
v5.1.1
v5.1.0
v5.0.17
v5.0.14
v5.0.12
v5.0.11
v5.0.10
v5.0.9
v5.0.8
v5.0.6
v5.0.5
v5.0.4
v5.0
v4.4.5
v4.4.4
v4.4.3
v4.4.2.6
v4.4.2.5
v4.4.2.4
Code Analysis
Analyzed Mar 16, 2026

TechGasp Photo Master Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
107
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped107 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
display (includes\instagram-master-admin-settings-wide-table-options.php:10)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

TechGasp Photo Master Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 10
actionadmin_menuincludes\instagram-master-admin-addons.php:39
actionadmin_menuincludes\instagram-master-admin-addons.php:42
actionnetwork_admin_menuincludes\instagram-master-admin.php:10
actionadmin_menuincludes\instagram-master-admin.php:11
actionadmin_menuincludes\instagram-master-admin.php:14
actionwidgets_initincludes\instagram-master-widget-buttons.php:3
actionwidgets_initincludes\instagram-master-widget-embed-basic.php:3
actionwp_enqueue_scriptsincludes\instagram-master-widget-embed-basic.php:8
filterthe_contentinstagram-master.php:54
filterplugin_action_linksinstagram-master.php:55
Maintenance & Trust

TechGasp Photo Master Maintenance & Trust

Maintenance Signals

WordPress version tested5.7.15
Last updatedMar 11, 2021
PHP min version
Downloads37K

Community Trust

Rating50/100
Number of ratings13
Active installs20
Developer Profile

TechGasp Photo Master Developer Profile

TechGasp

20 plugins · 3K total installs

84
trust score
Avg Security Score
86/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect TechGasp Photo Master

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/instagram-master/includes/instagram-master-admin.php/wp-content/plugins/instagram-master/includes/instagram-master-admin-addons.php/wp-content/plugins/instagram-master/includes/instagram-master-widget-buttons.php/wp-content/plugins/instagram-master/includes/instagram-master-widget-embed-basic.php
Script Paths
https://www.instagram.com/embed.js
Version Parameters
instagram-master/style.css?ver=instagram-master/js/admin-script.js?ver=instagram-master/js/admin-addons.js?ver=instagram-master/js/widget-buttons-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
Instagram Master Basic Responsive Embed
HTML Comments
Copyright 2013 TechGasp (email : info@techgasp.com)This program is free software; you can redistribute it and/or modifyThis program is distributed in the hope that it will be useful,You should have received a copy of the GNU General Public License+14 more
Data Attributes
data-instgrm-captioneddata-instgrm-permalinkdata-instgrm-versionid="instagram_master_widget_embed_basic"name="instagram_master_widget_embed_basic"classname="Instagram Master Basic Responsive Embed"
JS Globals
instagram_master_widget_embed_basic
Shortcode Output
<blockquote class="instagram-media"
FAQ

Frequently Asked Questions about TechGasp Photo Master