NFT Gallery Security & Risk Analysis

wordpress.org/plugins/nft-gallery

The simplest way to add NFTs from OpenSea to WordPress site. Powered by OpenSea API.

100 active installs v1.3.0 PHP 5.6+ WP 5.1+ Updated May 19, 2024
gallerynftopensea
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is NFT Gallery Safe to Use in 2026?

Generally Safe

Score 92/100

NFT Gallery has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "nft-gallery" plugin version 1.3.0 demonstrates a generally good security posture based on the provided static analysis. It utilizes prepared statements for all SQL queries and exhibits a high percentage of properly escaped output, indicating an awareness of common web vulnerabilities. The absence of known CVEs and a clean vulnerability history further bolster this impression. The limited attack surface, with only one shortcode and no unprotected entry points, is also a positive indicator. However, the analysis does flag some areas for attention. The presence of external HTTP requests without explicit mention of their security context warrants further investigation, as does the single capability check on a shortcode, which might be insufficient depending on the shortcode's functionality. The lack of nonce checks on any entry points is a notable omission, especially as it could be a weakness if the shortcode were to handle user-supplied data in a sensitive manner.

Key Concerns

  • External HTTP requests
  • Missing nonce checks
Vulnerabilities
None known

NFT Gallery Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

NFT Gallery Release Timeline

v1.3.0Current
v1.1.2
v1.1.1
v1.1.0
v1.0.0
Code Analysis
Analyzed Mar 16, 2026

NFT Gallery Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
8 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
2
Bundled Libraries
0

Output Escaping

89% escaped9 total outputs
Attack Surface

NFT Gallery Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[nftgallery] inc\shortcodes.php:130
WordPress Hooks 4
actionadmin_enqueue_scriptsadmin\functions.php:22
actionadmin_menuadmin\functions.php:24
actionadmin_initadmin\functions.php:36
actionwp_enqueue_scriptsnftgallery.php:41
Maintenance & Trust

NFT Gallery Maintenance & Trust

Maintenance Signals

WordPress version tested6.5.8
Last updatedMay 19, 2024
PHP min version5.6
Downloads6K

Community Trust

Rating100/100
Number of ratings2
Active installs100
Developer Profile

NFT Gallery Developer Profile

Hendra Setiawan

2 plugins · 900 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect NFT Gallery

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/nft-gallery/assets/css/frontend.css/wp-content/plugins/nft-gallery/assets/js/frontend.js/wp-content/plugins/nft-gallery/assets/css/flexboxgrid.min.css
Script Paths
/wp-content/plugins/nft-gallery/assets/js/frontend.js
Version Parameters
nft-gallery/assets/css/frontend.css?ver=nft-gallery/assets/js/frontend.js?ver=nft-gallery/assets/css/flexboxgrid.min.css?ver=

HTML / DOM Fingerprints

CSS Classes
nftgallery-wrapper
HTML Comments
NFT Gallery - shortcodes.phpNFT Gallery - Admin Functions
Data Attributes
nftgallery-settings-groupnftgallery-apinftgallery-typenftgallery-limitnftgallery-stylenftgallery-id
Shortcode Output
[nftgallery]
FAQ

Frequently Asked Questions about NFT Gallery