Shared Albums for Google Photos (by JanZeman) Security & Risk Analysis

wordpress.org/plugins/janzeman-shared-albums-for-google-photos

Display publicly shared Google Photos albums with a modern, responsive Swiper-based gallery viewer.

20 active installs v1.0.7 PHP 7.0+ WP 5.0+ Updated Mar 11, 2026
albumembedgallerygoogle-photosswiper
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Shared Albums for Google Photos (by JanZeman) Safe to Use in 2026?

Generally Safe

Score 100/100

Shared Albums for Google Photos (by JanZeman) has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 23d ago
Risk Assessment

The janzeman-shared-albums-for-google-photos plugin, version 1.0.7, exhibits a generally good security posture based on the static analysis. A key strength is the complete absence of unprotected entry points, with all AJAX handlers and REST API routes appearing to have appropriate authentication and capability checks. The lack of dangerous functions, file operations, and critical/high severity taint flows further contributes to its positive security profile. The plugin also demonstrates good practices by implementing nonce checks and capability checks on its entry points, and a high percentage of output escaping.

Key Concerns

  • SQL queries not using prepared statements
  • Output escaping is not 100%
Vulnerabilities
None known

Shared Albums for Google Photos (by JanZeman) Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Shared Albums for Google Photos (by JanZeman) Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
0 prepared
Unescaped Output
27
76 escaped
Nonce Checks
2
Capability Checks
2
File Operations
0
External Requests
2
Bundled Libraries
0

SQL Query Safety

0% prepared2 total queries

Output Escaping

74% escaped103 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
handle_download_image (includes\class-orchestrator.php:926)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Shared Albums for Google Photos (by JanZeman) Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 3

authwp_ajax_jzsa_download_imageincludes\class-orchestrator.php:129
noprivwp_ajax_jzsa_download_imageincludes\class-orchestrator.php:130
authwp_ajax_jzsa_shortcode_previewincludes\class-orchestrator.php:131

Shortcodes 1

[jzsa-album] includes\class-orchestrator.php:126
WordPress Hooks 7
actionwp_enqueue_scriptsincludes\class-orchestrator.php:127
actionsave_postincludes\class-orchestrator.php:128
actionadmin_enqueue_scriptsincludes\class-orchestrator.php:136
actionadmin_menuincludes\class-settings-page.php:24
actionadmin_enqueue_scriptsincludes\class-settings-page.php:25
actioninitjanzeman-shared-albums-for-google-photos.php:50
actionadmin_initjanzeman-shared-albums-for-google-photos.php:86
Maintenance & Trust

Shared Albums for Google Photos (by JanZeman) Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 11, 2026
PHP min version7.0
Downloads374

Community Trust

Rating80/100
Number of ratings1
Active installs20
Developer Profile

Shared Albums for Google Photos (by JanZeman) Developer Profile

Jan Zeman

1 plugin · 20 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Shared Albums for Google Photos (by JanZeman)

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/janzeman-shared-albums-for-google-photos/assets/css/jzsa-frontend.css/wp-content/plugins/janzeman-shared-albums-for-google-photos/assets/js/jzsa-frontend.js/wp-content/plugins/janzeman-shared-albums-for-google-photos/assets/vendor/swiper/swiper-bundle.min.css/wp-content/plugins/janzeman-shared-albums-for-google-photos/assets/vendor/swiper/swiper-bundle.min.js
Script Paths
assets/vendor/swiper/swiper-bundle.min.jsassets/js/jzsa-frontend.js
Version Parameters
janzeman-shared-albums-for-google-photos/assets/css/jzsa-frontend.css?ver=janzeman-shared-albums-for-google-photos/assets/js/jzsa-frontend.js?ver=janzeman-shared-albums-for-google-photos/assets/vendor/swiper/swiper-bundle.min.css?ver=janzeman-shared-albums-for-google-photos/assets/vendor/swiper/swiper-bundle.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
jzsa-album-wrapperjzsa-album-galleryjzsa-album-captionjzsa-album-navigationjzsa-album-paginationjzsa-album-button-prevjzsa-album-button-nextjzsa-album-scrollbar+3 more
HTML Comments
<!-- Main Plugin Orchestrator --><!-- Smart Caching Strategy:<!-- Cache key based on MD5(URL) for global album caching --><!-- Stores only base photo URLs (without dimensions) in cache -->+60 more
Data Attributes
data-album-urldata-max-photosdata-gallery-widthdata-gallery-heightdata-autoplay-delaydata-fullscreen-autoplay-delay+5 more
JS Globals
jzsa_frontend_dataJZSA_Swiper
REST Endpoints
/wp-json/jzsa/v1/album
Shortcode Output
<div class="jzsa-album-wrapper" data-album-url<div class="jzsa-album-gallery swiper"><div class="swiper-wrapper"><div class="swiper-slide jzsa-photo-container">
FAQ

Frequently Asked Questions about Shared Albums for Google Photos (by JanZeman)