PG Slideshow-Gallery Security & Risk Analysis

wordpress.org/plugins/pg-slideshow-gallery

Setup and include a slideshow/gallery/animated slideshow easily in your wordpress pages. - Install the plugin, change the settings as per your requir …

0 active installs v1.0.2 PHP + WP 3.5+ Updated Dec 27, 2022
galleryresponsiveslide-showsliderslideshow
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is PG Slideshow-Gallery Safe to Use in 2026?

Generally Safe

Score 85/100

PG Slideshow-Gallery has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The pg-slideshow-gallery plugin version 1.0.2 exhibits a mixed security posture. On the positive side, the plugin demonstrates good practices by utilizing prepared statements for all SQL queries, having no recorded vulnerabilities in its history, and not performing file operations or external HTTP requests. The presence of nonce and capability checks, although not comprehensive across all entry points, is also a positive sign. However, a significant concern arises from the plugin's attack surface. It exposes two AJAX handlers, and critically, both of these lack authentication checks. This means any unauthenticated user could potentially trigger these handlers, leading to unintended behavior or exploitation if the handlers themselves contain logic flaws.

Key Concerns

  • Unprotected AJAX handlers
Vulnerabilities
None known

PG Slideshow-Gallery Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

PG Slideshow-Gallery Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
62
280 escaped
Nonce Checks
4
Capability Checks
3
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

82% escaped342 total outputs
Attack Surface
2 unprotected

PG Slideshow-Gallery Attack Surface

Entry Points2
Unprotected2

AJAX Handlers 2

authwp_ajax_portfolio_gallery_load_stylesheetclasses\PSG_PGAJAX.php:19
noprivwp_ajax_portfolio_gallery_load_stylesheetclasses\PSG_PGAJAX.php:20
WordPress Hooks 19
actionadmin_initclasses\PSG_PGGeneralSettings.php:60
actionadmin_menuclasses\PSG_PGGeneralSettings.php:63
actionadmin_enqueue_scriptsclasses\PSG_PGGeneralSettings.php:66
actioninitclasses\PSG_PGPostType.php:22
actionsave_postclasses\PSG_PGPostType.php:23
actionadmin_enqueue_scriptsclasses\PSG_PGPostType.php:24
actionadmin_action_portfolio_gallery_duplicate_slideshowclasses\PSG_PGPostType.php:26
filterpost_updated_messagesclasses\PSG_PGPostType.php:28
filterpost_row_actionsclasses\PSG_PGPostType.php:29
actionadmin_noticesclasses\PSG_PGPostType.php:114
actionmedia_buttonsclasses\PSG_PGShortcode.php:33
actionadmin_enqueue_scriptsclasses\PSG_PGShortcode.php:35
actionwp_enqueue_scriptsclasses\PSG_PGSlideshowStylesheet.php:20
actioninitgallery.php:38
actioninitgallery.php:39
actionwp_enqueue_scriptsgallery.php:42
actionadmin_enqueue_scriptsgallery.php:43
actiongallery_showgallery.php:58
actionwidgets_initgallery.php:64
Maintenance & Trust

PG Slideshow-Gallery Maintenance & Trust

Maintenance Signals

WordPress version tested6.0.11
Last updatedDec 27, 2022
PHP min version
Downloads1K

Community Trust

Rating80/100
Number of ratings1
Active installs0
Developer Profile

PG Slideshow-Gallery Developer Profile

Amin Y

3 plugins · 610 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect PG Slideshow-Gallery

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/pg-slideshow-gallery/js/min/pg_frontend.js/wp-content/plugins/pg-slideshow-gallery/js/min/pg_backend.js/wp-content/plugins/pg-slideshow-gallery/css/backend.css
Script Paths
/wp-content/plugins/pg-slideshow-gallery/js/min/pg_frontend.js/wp-content/plugins/pg-slideshow-gallery/js/min/pg_backend.js
Version Parameters
/pg-slideshow-gallery/js/min/pg_frontend.js?ver=/pg-slideshow-gallery/js/min/pg_backend.js?ver=/pg-slideshow-gallery/css/backend.css?ver=

HTML / DOM Fingerprints

CSS Classes
pg-slideshow-gallery
Data Attributes
data-pg-slideshow-gallery
JS Globals
portfolio_gallery_script_adminURLglobals
Shortcode Output
[portfolio_gallery]
FAQ

Frequently Asked Questions about PG Slideshow-Gallery