Shared Albums for Google Photos Security & Risk Analysis

wordpress.org/plugins/janzeman-shared-albums-for-google-photos

Embed shared Google Photos albums directly from the source, without uploading copies to WordPress.

200 active installs v2.4.4 PHP 7.0+ WP 5.0+ Updated Jul 19, 2026
albumembedgallerygoogle-photosswiper
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Shared Albums for Google Photos Safe to Use in 2026?

Generally Safe

Score 100/100

Shared Albums for Google Photos has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The janzeman-shared-albums-for-google-photos plugin, version 1.0.7, exhibits a generally good security posture based on the static analysis. A key strength is the complete absence of unprotected entry points, with all AJAX handlers and REST API routes appearing to have appropriate authentication and capability checks. The lack of dangerous functions, file operations, and critical/high severity taint flows further contributes to its positive security profile. The plugin also demonstrates good practices by implementing nonce checks and capability checks on its entry points, and a high percentage of output escaping.

Key Concerns

  • SQL queries not using prepared statements
  • Output escaping is not 100%
Vulnerabilities
None known

Shared Albums for Google Photos Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Shared Albums for Google Photos Release Timeline

v2.4.4Current
v2.4.3
v2.3.7
v2.3.6
v2.3.5
v2.3.4
v2.1.8
v2.1.7
v2.1.6
v2.1.5
v2.1.4
v2.1.3
v2.1.2
v2.1.1
v2.1.0
v2.0.11
v2.0.10
v2.0.9
v2.0.8
v2.0.7
Code Analysis
Analyzed Mar 16, 2026

Shared Albums for Google Photos Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
0 prepared
Unescaped Output
27
76 escaped
Nonce Checks
2
Capability Checks
2
File Operations
0
External Requests
2
Bundled Libraries
0

SQL Query Safety

0% prepared2 total queries

Output Escaping

74% escaped103 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
handle_download_image (includes\class-orchestrator.php:926)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Shared Albums for Google Photos Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 3

authwp_ajax_jzsa_download_imageincludes\class-orchestrator.php:129
noprivwp_ajax_jzsa_download_imageincludes\class-orchestrator.php:130
authwp_ajax_jzsa_shortcode_previewincludes\class-orchestrator.php:131

Shortcodes 1

[jzsa-album] includes\class-orchestrator.php:126
WordPress Hooks 7
actionwp_enqueue_scriptsincludes\class-orchestrator.php:127
actionsave_postincludes\class-orchestrator.php:128
actionadmin_enqueue_scriptsincludes\class-orchestrator.php:136
actionadmin_menuincludes\class-settings-page.php:24
actionadmin_enqueue_scriptsincludes\class-settings-page.php:25
actioninitjanzeman-shared-albums-for-google-photos.php:50
actionadmin_initjanzeman-shared-albums-for-google-photos.php:86
Maintenance & Trust

Shared Albums for Google Photos Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 19, 2026
PHP min version7.0
Downloads3K

Community Trust

Rating98/100
Number of ratings9
Active installs200
Developer Profile

Shared Albums for Google Photos Developer Profile

Jan Zeman

1 plugin · 200 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Shared Albums for Google Photos

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/janzeman-shared-albums-for-google-photos/assets/css/jzsa-frontend.css/wp-content/plugins/janzeman-shared-albums-for-google-photos/assets/js/jzsa-frontend.js/wp-content/plugins/janzeman-shared-albums-for-google-photos/assets/vendor/swiper/swiper-bundle.min.css/wp-content/plugins/janzeman-shared-albums-for-google-photos/assets/vendor/swiper/swiper-bundle.min.js
Script Paths
assets/vendor/swiper/swiper-bundle.min.jsassets/js/jzsa-frontend.js
Version Parameters
janzeman-shared-albums-for-google-photos/assets/css/jzsa-frontend.css?ver=janzeman-shared-albums-for-google-photos/assets/js/jzsa-frontend.js?ver=janzeman-shared-albums-for-google-photos/assets/vendor/swiper/swiper-bundle.min.css?ver=janzeman-shared-albums-for-google-photos/assets/vendor/swiper/swiper-bundle.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
jzsa-album-wrapperjzsa-album-galleryjzsa-album-captionjzsa-album-navigationjzsa-album-paginationjzsa-album-button-prevjzsa-album-button-nextjzsa-album-scrollbar+3 more
HTML Comments
<!-- Main Plugin Orchestrator --><!-- Smart Caching Strategy:<!-- Cache key based on MD5(URL) for global album caching --><!-- Stores only base photo URLs (without dimensions) in cache -->+60 more
Data Attributes
data-album-urldata-max-photosdata-gallery-widthdata-gallery-heightdata-autoplay-delaydata-fullscreen-autoplay-delay+5 more
JS Globals
jzsa_frontend_dataJZSA_Swiper
REST Endpoints
/wp-json/jzsa/v1/album
Shortcode Output
<div class="jzsa-album-wrapper" data-album-url<div class="jzsa-album-gallery swiper"><div class="swiper-wrapper"><div class="swiper-slide jzsa-photo-container">
FAQ

Frequently Asked Questions about Shared Albums for Google Photos