[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fahClhvRF32ziQM_-kCgxYuAnrr8hIBlK8A10aH1ZRE4":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":99,"crawl_stats":38,"alternatives":105,"analysis":192,"fingerprints":532},"picture-gallery","Picture Gallery – Frontend Image Uploads, AJAX Photo List","1.6.4","videowhisper","https:\u002F\u002Fprofiles.wordpress.org\u002Fvideowhisper\u002F","\u003Cp>Elevate your WordPress site with the Picture Gallery plugin, enabling users to easily upload and manage images through a frontend interface. This powerful plugin supports guest uploads with CAPTCHA, generates thumbnails, and integrates seamlessly into your WordPress Media Library. Whether you’re looking to display image portfolios or sell digital photos, this tool is equipped with AJAX updates for live listing, drag-and-drop uploads, and extensive customization options to meet all your photo gallery needs.\u003C\u002Fp>\n\u003Ch4>Benefits\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Frontend & Backend Uploads: Allows both visitors and administrators to upload images conveniently.\u003C\u002Fli>\n\u003Cli>Advanced Security Features: Includes Google reCAPTCHA v3 to prevent spam and unauthorized uploads.\u003C\u002Fli>\n\u003Cli>Dynamic AJAX Photo Lists: Updates the gallery live without page reloads, enhancing user experience.\u003C\u002Fli>\n\u003Cli>Comprehensive Integration: Adds pictures and thumbnails to the WordPress Media Library for easy management.\u003C\u002Fli>\n\u003Cli>Customizable Access Controls: Set permissions for uploads and gallery views, ensuring content security.\u003C\u002Fli>\n\u003Cli>Monetization Opportunities: Integrates with plugins like “MicroPayments\u002FFansPaysite – Creator Subscriptions, Digital Content Monetization” to enable photo sales directly from your gallery.\u003C\u002Fli>\n\u003Cli>Multi-Device Compatibility: Supports uploads from mobile devices, including direct camera uploads on iOS and Android.\u003C\u002Fli>\n\u003Cli>Enhanced Engagement: Features like the “Rate Star Review” allow visitors to rate and review images, fostering community interaction.\u003C\u002Fli>\n\u003Cli>Bulk Upload Capabilities: Simplifies the process of adding large volumes of images, saving time and effort.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>adds picture post type to WordPress site with gallery taxonomy\u003C\u002Fli>\n\u003Cli>allows upload and import of pictures from frontend and backend\u003C\u002Fli>\n\u003Cli>guest picture upload with Google reCAPTCHA v3 integration, moderator notification\u003C\u002Fli>\n\u003Cli>generates thumbnail, generates feature image\u003C\u002Fli>\n\u003Cli>AJAX display and update of picture list\u003C\u002Fli>\n\u003Cli>shortcodes for listing pictures, upload form, import form\u003C\u002Fli>\n\u003Cli>mass picture upload\u003C\u002Fli>\n\u003Cli>mass picture import (from server)\u003C\u002Fli>\n\u003Cli>setup user types that can share pictures\u003C\u002Fli>\n\u003Cli>pending picture \u002F approval for user types that can’t publish directly\u003C\u002Fli>\n\u003Cli>integrates \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frate-star-review\u002F\" title=\"Rate Star Review - AJAX Reviews for Content, with Star Ratings\" rel=\"ugc\">Rate Star Review – AJAX Reviews for Content, with Star Ratings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>filter pictures by category, tag, name\u003C\u002Fli>\n\u003Cli>sort pictures by date, views, rating\u003C\u002Fli>\n\u003Cli>include pictures and thumbs in Media Library (setting)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Guest Picture Upload\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>special shortcode for guest (visitor) picture upload\u003C\u002Fli>\n\u003Cli>Google reCAPTCHA v3 integration\u003C\u002Fli>\n\u003Cli>limit uploads per IP \u003C\u002Fli>\n\u003Cli>moderator notification by email (custom)\u003C\u002Fli>\n\u003Cli>custom message for upload success\u003C\u002Fli>\n\u003Cli>persistent form fields in case of error\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Access Control: Membership, Sales\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>define global picture access list (roles, user emails & ids)\u003C\u002Fli>\n\u003Cli>role galleries: assign pictures as accessible by certain roles\u003C\u002Fli>\n\u003Cli>exception galleries: free, registered, unpublished\u003C\u002Fli>\n\u003Cli>show preview and custom message when inaccessible\u003C\u002Fli>\n\u003Cli>integrates \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpaid-membership\u002F\" title=\"MicroPayments\u002FFansPaysite - Creator Subscriptions, Digital Content Monetization\" rel=\"ugc\">MicroPayments\u002FFansPaysite – Creator Subscriptions, Digital Content Monetization\u003C\u002Fa> plugin to allow selling items\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>HTML5 Picture Uploader\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Drag & Drop\u003C\u002Fli>\n\u003Cli>AJAX (no Submit, page reload required to upload more pictures)\u003C\u002Fli>\n\u003Cli>multi picture support\u003C\u002Fli>\n\u003Cli>status \u002F progress bar for each upload\u003C\u002Fli>\n\u003Cli>unpredictable secure upload file names\u003C\u002Fli>\n\u003Cli>fallback to standard upload for older browsers\u003C\u002Fli>\n\u003Cli>mobile camera upload (iOS6+, Android 3+)\u003C\u002Fli>\n\u003Cli>backend multi upload menu\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Recommended for use with these solutions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002Ffanspaysite.com\u002F\" title=\"FansPaysite - Frontend Content Management and Monetization\" rel=\"nofollow ugc\">FansPaysite – Creator Subscriptions, MicroPayments, Digital Content\u003C\u002Fa> – manage content posts including pictures from frontend\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fpaidvideochat.com\u002F\" title=\"PaidVideoChat Turnkey Webcams Site Plugin\" rel=\"nofollow ugc\">Paid VideoChat\u003C\u002Fa>  – integrate pictures in performer profiles\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fvideo-share-vod\u002F\" title=\"Video Share \u002F Video On Demand Turnkey Site Plugin\" rel=\"ugc\">Video Share VOD\u003C\u002Fa> – add pictures in addition to videos\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbroadcastlivevideo.com\u002F\" title=\"Broadcast Live Video Camera Site Plugin\" rel=\"nofollow ugc\">Broadcast Live Video\u003C\u002Fa> – add pictures in addition to live channels\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you find this plugin idea useful or interesting, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fpicture-gallery\u002Freviews\u002F#new-post\" rel=\"ugc\">Leave a Review\u003C\u002Fa> to help us drive more resources into further development and improvements.\u003C\u002Fp>\n\u003Cp>If you need custom development or support, \u003Ca href=\"https:\u002F\u002Fconsult.videowhisper.com\u002F\" title=\"Consult VideoWhisper for WP Plugin Development\" rel=\"nofollow ugc\">Consult VideoWhisper\u003C\u002Fa>: professional installation, configuration, troubleshooting, compatible hosting, custom development for new options and features.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>This is a free open source plugin provided as is. If you need further assistance, troubleshooting, custom development to integrate with your site, \u003Ca href=\"https:\u002F\u002Fconsult.videowhisper.com\u002F\" rel=\"nofollow ugc\">Consult VideoWhisper\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Demos\u003C\u002Fh3>\n\u003Cp>Pictures page on various themes:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fdemo.fanspaysite.com\u002Fpictures\u002F\" rel=\"nofollow ugc\">Fans Paysite Demo\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fdemo.videosharevod.com\u002Fpictures\u002F\" rel=\"nofollow ugc\">Video Share VOD Demo\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fdemo.paidvideochat.com\u002Fpictures\u002F\" rel=\"nofollow ugc\">Paid Videochat Demo\u003C\u002Fa>\u003C\u002Fp>\n","Streamline photo sharing with AJAX-powered galleries, frontend uploads, and integrated monetization.",400,27251,74,3,"2025-09-09T16:26:00.000Z","6.7.5","5.1","7.4",[20,21,22,23,24],"gallery","image","photo","picture","upload","https:\u002F\u002Fvideochat-scripts.com\u002Fpicture-gallery-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpicture-gallery.zip",97,5,0,"2025-03-12 00:00:00","2026-03-15T15:16:48.613Z",[33,48,62,73,85],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2025-26581","picture-gallery-unauthenticated-stored-cross-site-scripting","Picture Gallery \u003C= 1.6.3 - Unauthenticated Stored Cross-Site Scripting","The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.6.3","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2026-02-26 15:19:50",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F82583e18-2e0b-4618-bc0c-d8b058acc1c8?source=api-prod",352,{"id":49,"url_slug":50,"title":51,"description":52,"plugin_slug":4,"theme_slug":38,"affected_versions":53,"patched_in_version":54,"severity":40,"cvss_score":55,"cvss_vector":56,"vuln_type":43,"published_date":57,"updated_date":58,"references":59,"days_to_patch":61},"CVE-2024-13584","picture-gallery-frontend-image-uploads-ajax-photo-list-authenticated-contributor-stored-cross-site-scripting","Picture Gallery – Frontend Image Uploads, AJAX Photo List \u003C= 1.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting","The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_pictures' shortcode in all versions up to, and including, 1.5.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C=1.5.19","1.5.20",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","2025-01-21 00:00:00","2025-01-22 03:21:31",[60],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F0f721733-2245-4d8d-9881-91cc0b48551b?source=api-prod",1,{"id":63,"url_slug":64,"title":65,"description":66,"plugin_slug":4,"theme_slug":38,"affected_versions":67,"patched_in_version":68,"severity":40,"cvss_score":55,"cvss_vector":56,"vuln_type":43,"published_date":69,"updated_date":70,"references":71,"days_to_patch":61},"CVE-2024-12696","picture-gallery-frontend-image-uploads-ajax-photo-list-authenticated-contributor-stored-cross-site-scripting-via-videowh","Picture Gallery – Frontend Image Uploads, AJAX Photo List \u003C= 1.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest Shortcode","The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videowhisper_picture_upload_guest shortcode in all versions up to, and including, 1.5.22 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C=1.5.22","1.5.23","2025-01-17 18:02:02","2025-01-18 07:05:10",[72],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fa116c846-72df-4701-893a-744a26b191d6?source=api-prod",{"id":74,"url_slug":75,"title":76,"description":77,"plugin_slug":4,"theme_slug":38,"affected_versions":78,"patched_in_version":79,"severity":40,"cvss_score":55,"cvss_vector":56,"vuln_type":43,"published_date":80,"updated_date":81,"references":82,"days_to_patch":84},"CVE-2024-34759","picture-gallery-authenticated-author-stored-cross-site-scripting","Picture Gallery \u003C= 1.5.11 - Authenticated (Author+) Stored Cross-Site Scripting","The Picture Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.5.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","\u003C=1.5.11","1.5.12","2024-05-14 00:00:00","2024-05-20 16:52:31",[83],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Facaad554-4094-4b52-a695-cb1e775495a5?source=api-prod",7,{"id":86,"url_slug":87,"title":88,"description":89,"plugin_slug":4,"theme_slug":38,"affected_versions":90,"patched_in_version":91,"severity":40,"cvss_score":92,"cvss_vector":93,"vuln_type":43,"published_date":94,"updated_date":95,"references":96,"days_to_patch":98},"WF-ea01e11e-31b5-4cd9-8fab-3693e47f705a-picture-gallery","picture-gallery-frontend-image-uploads-ajax-photo-list-cross-site-scripting","Picture Gallery – Frontend Image Uploads, AJAX Photo List \u003C 1.4.3 - Cross-Site Scripting","The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'p_videowhisper_content_edit' parameter in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrative privileges and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.","\u003C=1.4.2","1.4.3",5.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","2021-08-10 00:00:00","2024-01-22 19:56:02",[97],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fea01e11e-31b5-4cd9-8fab-3693e47f705a?source=api-prod",896,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":100,"total_installs":101,"avg_security_score":102,"avg_patch_time_days":103,"trust_score":13,"computed_at":104},12,1270,93,1072,"2026-04-04T15:14:26.501Z",[106,129,148,165,177],{"slug":107,"name":108,"version":109,"author":110,"author_profile":111,"description":112,"short_description":113,"active_installs":114,"downloaded":115,"rating":13,"num_ratings":100,"last_updated":116,"tested_up_to":117,"requires_at_least":118,"requires_php":119,"tags":120,"homepage":125,"download_link":126,"security_score":127,"vuln_count":61,"unpatched_count":61,"last_vuln_date":128,"fetched_at":31},"facebook-photo-fetcher","Social Photo Fetcher","3.0.4","JK","https:\u002F\u002Fprofiles.wordpress.org\u002Fjustin_k\u002F","\u003Cp>Social Photo Fetcher (previously called “Facebook Photo Fetcher”) allows you to quickly and easily generate WordPress photo galleries from Facebook albums.\u003C\u002Fp>\n\u003Cp>The idea was inspired by \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Ffotobook\u002F\" rel=\"ugc\">Fotobook\u003C\u002Fa>, though its approach is fundamentally different: while Fotobook’s emphasis is on automation, this plugin allows a great deal of customization.  With it you can create galleries in any Post or Page you like, right alongside your regular content. You do this simply by putting a “magic HTML tag” in the post’s content – much like \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FGallery_Shortcode\" rel=\"nofollow ugc\">WordPress Shortcode\u003C\u002Fa>. Upon saving, the tag will instantly be populated with the Facebook album content. Presentation is fully customizable via parameters to the “magic tag” – you can choose to show only a subset of an album’s photos, change the number of photos per column, show photo captions, and more.  Plus, Social Photo Fetcher doesn’t limit you to just your own albums: it can create galleries from fanpages as well.\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Uses Facebook’s API to instantly create WordPress photo galleries from Facebook albums.\u003C\u002Fli>\n\u003Cli>Galleries are fully customizable: you can import complete albums, select excerpts, random excerpts, album descriptions, photo captions, and more.\u003C\u002Fli>\n\u003Cli>Galleries can be organized however you like: in any post or page, alone or alongside your other content.\u003C\u002Fli>\n\u003Cli>Simple PHP template function allows programmers to manually embed albums in any template or widget.\u003C\u002Fli>\n\u003Cli>Built-in LightBox: Photos appear in attractive pop-up overlays without the need for any other plugins.\u003C\u002Fli>\n\u003Cli>Admin panel handles all the setup for you: Just login and you’re ready to start making albums.\u003C\u002Fli>\n\u003Cli>No custom database tables required; galleries live in regular post content.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For a Demo Gallery, see the \u003Ca href=\"https:\u002F\u002Fwww.justin-klein.com\u002Fprojects\u002Ffacebook-photo-fetcher\" rel=\"nofollow ugc\">plugin’s homepage\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Donate\u003C\u002Fh3>\n\u003Cp>Many hours have gone into developing & maintaining this plugin, far beyond my own personal needs. If you find it useful, please consider \u003Ca href=\"https:\u002F\u002Fwww.justin-klein.com\u002Fprojects\u002Ffacebook-photo-fetcher\u002F#donate\" rel=\"nofollow ugc\">making a donation\u003C\u002Fa> to help support its continued development.\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>This plugin uses the Facebook API to fetch photo albums from Facebook. Facebook’s security rules require that apps must authorize from one specific, known location. In order comply with this requirement, when you first authorize the plugin from its admin panel, a Facebook dialog will be initiated via my own authentication server. The dialog itself is shown directly by Facebook, and Facebook handles the entire login process – no personal information will be transferred via my server, as Facebook only supplies a single-use token which I then hand back to your site to be stored. This is what the plugin uses in order to fetch the photos. For more information about how the Facebook authorization process works, please see \u003Ca href=\"https:\u002F\u002Fdevelopers.facebook.com\u002Fdocs\u002Ffacebook-login\u002Fweb\" rel=\"nofollow ugc\">Facebook’s documentation\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Usage of this plugin means the site administrator is consenting to \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fpolicy.php\" rel=\"nofollow ugc\">Facebook’s data policy\u003C\u002Fa>. Fetched album data will be stored in your WordPress database, in posts or pages of your choosing. It can be removed by deleting those posts or pages. You are solely responsible for the security and protection of the fetched data, as it resides on and is hosted within your own WordPress site.\u003C\u002Fp>\n\u003Cp>I do not store or process any of your data.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>Please direct all support requests \u003Ca href=\"https:\u002F\u002Fwww.justin-klein.com\u002Fprojects\u002Ffacebook-photo-fetcher#feedback\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n","Allows you to automatically create Wordpress photo galleries from Facebook albums.  Simple to use and highly customizable.",1000,258658,"2024-04-04T23:45:00.000Z","6.5.8","2.5","",[121,20,122,123,124],"facebook","images","photos","pictures","https:\u002F\u002Fwww.justin-klein.com\u002Fprojects\u002Ffacebook-photo-fetcher","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffacebook-photo-fetcher.3.0.4.zip",70,"2025-12-08 00:00:00",{"slug":130,"name":131,"version":132,"author":133,"author_profile":134,"description":135,"short_description":136,"active_installs":137,"downloaded":138,"rating":139,"num_ratings":140,"last_updated":141,"tested_up_to":142,"requires_at_least":143,"requires_php":119,"tags":144,"homepage":119,"download_link":146,"security_score":147,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"jj-nextgen-jquery-slider","JJ NextGen JQuery Slider","1.3.9","jjcoder","https:\u002F\u002Fprofiles.wordpress.org\u002Fjjcoder\u002F","\u003Cp>The ‘JJ NextGen JQuery Slider’ allows you to create a ‘Nivo slider’ (http:\u002F\u002Fnivo.dev7studios.com\u002F) as a widget or as a shortcode.\u003Cbr \u002F>\nThis plugin uses the ‘NextGen Gallery’ plugin for its images.\u003C\u002Fp>\n\u003Cp>Requirements:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>NextGen Gallery Plugin (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fnextgen-gallery\u002F)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>NextGen Gallery Integration:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This plugin uses the original width and height of the image uploaded so make sure the images are the correct dimensions when uploaded.\u003C\u002Fli>\n\u003Cli>Alt & Title Text Field: Provide a full url here and the image will link to this. Only works if alt field starts with either of these; \u002F, http, or ftp.\u003C\u002Fli>\n\u003Cli>Description Field: Will be used as a caption.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can specify the following parameters:\u003C\u002Fp>\n\u003Cp>NOTE: sc means shortcode:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Title: Title for slider. Leave blank for no title. (sc: title=”My Slider”)\u003C\u002Fli>\n\u003Cli>Gallery: Leave blank to use all galleries or choose a gallery to use. (sc: gallery=”galleryid”)\u003C\u002Fli>\n\u003Cli>Order: Order to display results in. You can choose; Random, Latest First, Oldest First, or NextGen Sortorder. Random will still work when a page is cached. (sc: order=”random”|”asc”|”desc”|”sortorder”)\u003C\u002Fli>\n\u003Cli>Tags: comma separated list of tags to filter results by. (sc: tags=”tag1, tag2″)\u003C\u002Fli>\n\u003Cli>Shuffle: If order is random and this is true will shuffle images with javascript. Useful if your are caching your pages. (sc: shuffle=”true”|”false”)\u003C\u002Fli>\n\u003Cli>Max pictures: The maximum amount of pictures to use. (sc: max_pictures=”6″)\u003C\u002Fli>\n\u003Cli>HTML id: HTML id to use. Defaults to ‘slider’. Needs to be different for multiple sliders on same page. (sc: html_id=”slider”)\u003C\u002Fli>\n\u003Cli>Width: Width to use on slider. (sc: width=”200″)\u003C\u002Fli>\n\u003Cli>Height: Height to use on slider. (sc: height=”150″)\u003C\u002Fli>\n\u003Cli>Center: Centers content in container. Requires width to be set. (sc: center=”1″)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Nivo slider settings:\u003C\u002Fp>\n\u003Cp>Please check the Nivo slider home page for more details (http:\u002F\u002Fnivo.dev7studios.com\u002F#usage).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>effect: Specify sets like: ‘fold,fade,sliceDown’. (sc: effect=”setting”)\u003C\u002Fli>\n\u003Cli>slices: (sc: slices=”setting”)\u003C\u002Fli>\n\u003Cli>boxCols: (sc: boxcols=”setting”)\u003C\u002Fli>\n\u003Cli>boxRows: (sc: boxrows=”setting”)\u003C\u002Fli>\n\u003Cli>animSpeed: Slide transition speed. (sc: animspeed=”setting”)\u003C\u002Fli>\n\u003Cli>pauseTime: (sc: pausetime=”setting”)\u003C\u002Fli>\n\u003Cli>startSlide: Set starting Slide (0 index). (sc: startslide=”setting”)\u003C\u002Fli>\n\u003Cli>directionNav: Next & Prev. (sc: directionnav=”setting”)\u003C\u002Fli>\n\u003Cli>directionNavHide: Only show on hover. (sc: directionnavhide=”setting”)\u003C\u002Fli>\n\u003Cli>controlNav: 1,2,3… (sc: controlnav=”setting”)\u003C\u002Fli>\n\u003Cli>controlNavThumbs: Use thumbnails for Control Nav. You can choose ‘nextgen thumbs” that will automatically use the image’s thumbnail from nextgen gallery or ‘nextgen original’ that will use the current image. (sc: controlnavthumbs=”true”|”false”|”nextgen_thumbs”|”nextgen_original”)\u003C\u002Fli>\n\u003Cli>thumbsWidth: Resize thumbnail to this width. Recommended to set if using thumbnails. (sc: thumbswidth=”20″)\u003C\u002Fli>\n\u003Cli>thumbsHeight: Resize thumbnail to this height. Recommended to set if using thumbnails. (sc: thumbsheight=”20″)\u003C\u002Fli>\n\u003Cli>thumbsContainerHeight: Height for thumbnails container. Calculation should be ‘number of thumbnail image rows’ x ‘thumbsheight’. (sc: thumbscontainerheight=”20″)\u003C\u002Fli>\n\u003Cli>thumbsGap: Gap between thumbnails. (sc: thumbsgap=”5″)\u003C\u002Fli>\n\u003Cli>controlNavThumbsFromRel: Use image rel for thumbs. (sc: controlnavthumbsfromrel=”setting”)\u003C\u002Fli>\n\u003Cli>controlNavThumbsSearch: Replace this with… (sc: controlnavthumbssearch=”setting”)\u003C\u002Fli>\n\u003Cli>controlNavThumbsReplace: …this in thumb Image src. (sc: controlnavthumbsreplace=”setting”)\u003C\u002Fli>\n\u003Cli>keyboardNav: Use left & right arrows. (sc: keyboardnav=”setting”)\u003C\u002Fli>\n\u003Cli>pauseOnHover: Stop animation while hovering. (sc: pauseonhover=”setting”)\u003C\u002Fli>\n\u003Cli>manualAdvanc: Force manual transitions. (sc: manualadvance=”setting”)\u003C\u002Fli>\n\u003Cli>captionOpacity: Universal caption opacity. (sc: captionopacity=”setting”)\u003C\u002Fli>\n\u003Cli>Disable captions: (sc: disablecaptions=”1″)\u003C\u002Fli>\n\u003Cli>beforeChange: (sc: beforechange=”setting”)\u003C\u002Fli>\n\u003Cli>afterChange: (sc: afterchange=”setting”)\u003C\u002Fli>\n\u003Cli>slideshowEnd: Triggers after all slides have been shown. (sc: slideshowend=”setting”)\u003C\u002Fli>\n\u003Cli>lastSlide: Triggers when last slide is shown. (sc: lastslide=”setting”)\u003C\u002Fli>\n\u003Cli>afterLoad: Triggers when slider has loaded. (sc: afterload=”setting”)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Nivo Effects:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>sliceDown\u003C\u002Fli>\n\u003Cli>sliceDownLeft\u003C\u002Fli>\n\u003Cli>sliceUp\u003C\u002Fli>\n\u003Cli>sliceUpLeft\u003C\u002Fli>\n\u003Cli>sliceUpDown\u003C\u002Fli>\n\u003Cli>sliceUpDownLeft\u003C\u002Fli>\n\u003Cli>fold\u003C\u002Fli>\n\u003Cli>fade\u003C\u002Fli>\n\u003Cli>random\u003C\u002Fli>\n\u003Cli>slideInRight\u003C\u002Fli>\n\u003Cli>slideInLeft\u003C\u002Fli>\n\u003Cli>boxRandom\u003C\u002Fli>\n\u003Cli>boxRain\u003C\u002Fli>\n\u003Cli>boxRainReverse\u003C\u002Fli>\n\u003Cli>boxRainGrow\u003C\u002Fli>\n\u003Cli>boxRainGrowReverse\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Shortcodes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>[jj-ngg-jquery-slider html_id=”about-slider”]\u003C\u002Fli>\n\u003Cli>[jj-ngg-jquery-slider title=”Hello” gallery=”1″ html_id=”about-slider” width=”200″ height=”150″ center=”1″]\u003C\u002Fli>\n\u003Cli>[jj-ngg-jquery-slider html_id=”about-slider” directionnav=”false” controlnav=”false”]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Try out my other plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>JJ NextGen JQuery Carousel (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjj-nextgen-jquery-carousel\u002F)\u003C\u002Fli>\n\u003Cli>JJ NextGen JQuery Cycle (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjj-nextgen-jquery-cycle\u002F)\u003C\u002Fli>\n\u003Cli>JJ NextGen Unload (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjj-nextgen-unload\u002F)\u003C\u002Fli>\n\u003Cli>JJ NextGen Image List (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjj-nextgen-image-list\u002F)\u003C\u002Fli>\n\u003Cli>JJ SwfObject (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjj-swfobject\u002F)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Contributors\u003C\u002Fh3>\n","Allows you to pick a gallery from the 'NextGen Gallery' plugin to use as a 'JQuery Nivo slider'.",900,129800,86,4,"2017-11-28T19:03:00.000Z","3.2.1","2.8",[20,21,22,23,145],"widgets","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjj-nextgen-jquery-slider.1.3.9.zip",85,{"slug":149,"name":150,"version":151,"author":152,"author_profile":153,"description":154,"short_description":155,"active_installs":156,"downloaded":157,"rating":158,"num_ratings":159,"last_updated":160,"tested_up_to":161,"requires_at_least":143,"requires_php":119,"tags":162,"homepage":163,"download_link":164,"security_score":147,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"nextgen-gallery-sidebar-widget","NextGEN Gallery Sidebar Widget","0.4.3","maff","https:\u002F\u002Fprofiles.wordpress.org\u002Fmaff\u002F","\u003Cp>The NextGEN widgets only allow showing of single images, I needed a solution to show links to galleries, so I wrote this widget. You can specify the following parameters:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Maximum Galleries: the number of galleries you want to show\u003C\u002Fli>\n\u003Cli>Gallery Order: you can select random, date added ascending or date added descending\u003C\u002Fli>\n\u003Cli>Gallery Thumbnail: which image should be taken as thumbail in the sidebar (preview set in NGG, first or random image)\u003C\u002Fli>\n\u003Cli>AutoThumb parameters: if you got \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fautothumb\u002F\" rel=\"ugc\">AutoThumb\u003C\u002Fa> installed, the widget will use its functions to resize the image to your needs. Use a string like \u003Ccode>w=80&h=80&zc=1\u003C\u002Fcode> here to show 80×80 square thumbnails.\u003C\u002Fli>\n\u003Cli>Output width\u002Fheight: if you don’t use AutoThumb, the plugin will set the HTML attributes width & height.\u003C\u002Fli>\n\u003Cli>Default Link Id: the widget assumes that you set up pages for each gallery and link the gallery to that page (you can use the NGG Gallery Editor to do this). If a gallery has no link set, it will use the default link (id of a page or post).\u003C\u002Fli>\n\u003Cli>Exclude galleries: exclude galleries by specifying their ID as comma separated list\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>All development is done on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmaff\u002Fwp-nextgen-gallery-sidebar-widget\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>. If you have ideas, enhancements, etc. feel free to fork the project and send a pull request.\u003C\u002Fp>\n\u003Cp>For any issues please use the \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fmaff\u002Fwp-nextgen-gallery-sidebar-widget\u002Fissues\" rel=\"nofollow ugc\">Issue Tracker\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Templating:\u003C\u002Fp>\n\u003Cp>Beginning with version 0.3, you have full control over the widget’s output as it is controlled with templates. As the built-in templates would get overwritten on every plugin update, create a new directory called “ngg-sidebar-widget” in your theme’s directory and copy the two template files “tpl.outer.html” and “tpl.inner.html” over there to edit them. The outer template is just a wrapper template (useful when you need some additional markup, e.g. when creating a list), the inner template has access to all the values from the gallery and image object (written in a simple templating syntax: {=object.member}). For the most use cases you should only need “gallery.title”, “gallery.link” and “image.url”.\u003C\u002Fp>\n\u003Cp>You will have access to the following variables:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>gallery\n\u003Cul>\n\u003Cli>gid\u003C\u002Fli>\n\u003Cli>name\u003C\u002Fli>\n\u003Cli>path\u003C\u002Fli>\n\u003Cli>title\u003C\u002Fli>\n\u003Cli>galdesc\u003C\u002Fli>\n\u003Cli>pageid\u003C\u002Fli>\n\u003Cli>previewpic\u003C\u002Fli>\n\u003Cli>author\u003C\u002Fli>\n\u003Cli>link\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>image\n\u003Cul>\n\u003Cli>errmsg\u003C\u002Fli>\n\u003Cli>error\u003C\u002Fli>\n\u003Cli>imageURL\u003C\u002Fli>\n\u003Cli>thumbURL\u003C\u002Fli>\n\u003Cli>imagePath\u003C\u002Fli>\n\u003Cli>thumbPath\u003C\u002Fli>\n\u003Cli>href\u003C\u002Fli>\n\u003Cli>thumbPrefix\u003C\u002Fli>\n\u003Cli>thumbFolder\u003C\u002Fli>\n\u003Cli>galleryid\u003C\u002Fli>\n\u003Cli>pid\u003C\u002Fli>\n\u003Cli>filename\u003C\u002Fli>\n\u003Cli>description\u003C\u002Fli>\n\u003Cli>alttext\u003C\u002Fli>\n\u003Cli>imagedate\u003C\u002Fli>\n\u003Cli>exclude\u003C\u002Fli>\n\u003Cli>thumbcode\u003C\u002Fli>\n\u003Cli>name\u003C\u002Fli>\n\u003Cli>path\u003C\u002Fli>\n\u003Cli>title\u003C\u002Fli>\n\u003Cli>pageid\u003C\u002Fli>\n\u003Cli>previewpic\u003C\u002Fli>\n\u003Cli>permalink\u003C\u002Fli>\n\u003Cli>post_id\u003C\u002Fli>\n\u003Cli>sortorder\u003C\u002Fli>\n\u003Cli>meta_data\u003C\u002Fli>\n\u003Cli>gid\u003C\u002Fli>\n\u003Cli>galdesc\u003C\u002Fli>\n\u003Cli>author\u003C\u002Fli>\n\u003Cli>imageHTML\u003C\u002Fli>\n\u003Cli>thumbHTML\u003C\u002Fli>\n\u003Cli>url\u003C\u002Fli>\n\u003Cli>output_width\u003C\u002Fli>\n\u003Cli>output_height\u003C\u002Fli>\n\u003Cli>output_width_tag\u003C\u002Fli>\n\u003Cli>output_height_tag\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","A widget to show NextGEN galleries in your sidebar.",600,108779,100,2,"2012-02-06T19:12:00.000Z","3.3.2",[20,21,22,23,145],"http:\u002F\u002Failoo.net\u002F2009\u002F04\u002Fnextgen-gallery-sidebar-widget\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnextgen-gallery-sidebar-widget.0.4.3.zip",{"slug":166,"name":167,"version":168,"author":133,"author_profile":134,"description":169,"short_description":170,"active_installs":11,"downloaded":171,"rating":172,"num_ratings":159,"last_updated":173,"tested_up_to":174,"requires_at_least":143,"requires_php":119,"tags":175,"homepage":119,"download_link":176,"security_score":147,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"jj-nextgen-jquery-carousel","JJ NextGen JQuery Carousel","1.1.8","\u003Cp>The ‘JJ NextGen JQuery Carousel’ allows you to create a ‘JCarousel’ (http:\u002F\u002Fsorgalla.com\u002Fprojects\u002Fjcarousel\u002F) as a widget or as a shortcode.\u003Cbr \u002F>\nThis plugin uses the ‘NextGen Gallery’ plugin for its images.\u003C\u002Fp>\n\u003Cp>Requirements:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>NextGen Gallery Plugin (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fnextgen-gallery\u002F)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>NextGen Gallery Integration:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This plugin uses the original width and height of the image uploaded so make sure the images are the correct dimensions when uploaded.\u003C\u002Fli>\n\u003Cli>If a width and height are defined under the configuration all images will be resized to those dimensions (Highly recommended).\u003C\u002Fli>\n\u003Cli>Alt & Title Text Field: Provide a full url here and the image will link to this. Only works if alt field starts with either of these; \u002F, http, or ftp.\u003C\u002Fli>\n\u003Cli>Description Field: Will be used as image alt text. If alt text is present but not a valid url alt text will be used instead for image alt text.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can specify the following parameters:\u003C\u002Fp>\n\u003Cp>NOTE: sc means shortcode:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Title: Title. Leave blank for no title. (sc: title=”My Carousel”)\u003C\u002Fli>\n\u003Cli>Gallery: Leave blank to use all galleries or choose a gallery to use. (sc: gallery=”galleryid”)\u003C\u002Fli>\n\u003Cli>Order: Order to display results in. You can choose; Random, Latest First, Oldest First, or NextGen Sortorder. Random will still work when a page is cached. (sc: order=”random”|”asc”|”desc”|”sortorder”)\u003C\u002Fli>\n\u003Cli>Shuffle: If order is random and this is true will shuffle images with javascript. Useful if your are caching your pages. (sc: shuffle=”true”|”false”)\u003C\u002Fli>\n\u003Cli>Max pictures: The maximum amount of pictures to use. (sc: max_pictures=”6″)\u003C\u002Fli>\n\u003Cli>HTML id: HTML id to use. Defaults to ‘jcarousel’. Needs to be different for multiple instances on same page. (sc: html_id=”jcarousel”)\u003C\u002Fli>\n\u003Cli>Skin class: Class of skinning to use. Defaults to use the tango skin. (sc: skin_class=”jcarousel-skin-tango”)\u003C\u002Fli>\n\u003Cli>Image width: Width of image. Defaults to 75. (sc: width=”200″)\u003C\u002Fli>\n\u003Cli>Image height: Height of image. Defaults to 75. (sc: height=”150″)\u003C\u002Fli>\n\u003Cli>Image gap: Gap between images. (sc: gap=”5″)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>JCarousel settings:\u003C\u002Fp>\n\u003Cp>Please check the JCarousel home page for more details (http:\u002F\u002Fsorgalla.com\u002Fprojects\u002Fjcarousel\u002F#Configuration).\u003C\u002Fp>\n\u003Cul>\n\u003Cli>vertical: Specifies wether the carousel appears in horizontal or vertical orientation. Changes the carousel from a left\u002Fright style to a up\u002Fdown style carousel. (sc: vertical=”setting”)\u003C\u002Fli>\n\u003Cli>rtl: Specifies whether the carousel appears in RTL (Right-To-Left) mode. (sc: rtl=”setting”)\u003C\u002Fli>\n\u003Cli>start: The index of the item to start with. (sc: start=”setting”)\u003C\u002Fli>\n\u003Cli>offset: The index of the first available item at initialisation. (sc: offset=”setting”)\u003C\u002Fli>\n\u003Cli>size: Size of existing elements if size is not passed explicitly uses the number of total items. (sc: size=”setting”)\u003C\u002Fli>\n\u003Cli>scroll: The number of items to scroll by. (sc: scroll=”setting”)\u003C\u002Fli>\n\u003Cli>visible: If passed, the width\u002Fheight of the items will be calculated and set depending on the width\u002Fheight of the clipping, so that exactly that number of items will be visible. (sc: visible=”setting”)\u003C\u002Fli>\n\u003Cli>animation: The speed of the scroll animation as string in jQuery terms (“slow” or “fast”) or milliseconds as integer (See jQuery Documentation). If set to 0, animation is turned off. (sc: animation=”setting”)\u003C\u002Fli>\n\u003Cli>easing: The name of the easing effect that you want to use (See jQuery Documentation). (sc: easing=”setting”)\u003C\u002Fli>\n\u003Cli>auto: Specifies how many seconds to periodically autoscroll the content. If set to 0 (default) then autoscrolling is turned off. (sc: auto=”setting”)\u003C\u002Fli>\n\u003Cli>wrap: Specifies whether to wrap at the first\u002Flast item (or both) and jump back to the start\u002Fend. Options are “first”, “last”, “both” or “circular” as string. If set to null, wrapping is turned off (default). (sc: wrap=”setting”)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Shortcode Examples:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>[jj-ngg-jquery-carousel html_id=”about-jcarousel” gallery=”1″]\u003C\u002Fli>\n\u003Cli>[jj-ngg-jquery-carousel title=”Hello” html_id=”about-jcarousel” gallery=”1″ vertical=”true”]\u003C\u002Fli>\n\u003Cli>[jj-ngg-jquery-carousel html_id=”about-jcarousel” gallery=”2″ width=”150″ height=”100″ visible=”2″ scroll=”1″ auto=”3″]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Try out my other plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>JJ NextGen JQuery Slider (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjj-nextgen-jquery-slider\u002F)\u003C\u002Fli>\n\u003Cli>JJ NextGen JQuery Cycle (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjj-nextgen-jquery-cycle\u002F)\u003C\u002Fli>\n\u003Cli>JJ NextGen Unload (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjj-nextgen-unload\u002F)\u003C\u002Fli>\n\u003Cli>JJ NextGen Image List (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjj-nextgen-image-list\u002F)\u003C\u002Fli>\n\u003Cli>JJ SwfObject (https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fjj-swfobject\u002F)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Contributors\u003C\u002Fh3>\n","Allows you to pick a gallery from the 'NextGen Gallery' plugin to use as a 'JQuery JCarousel'.",63852,90,"2011-03-09T20:07:00.000Z","3.1.4",[20,21,22,23,145],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjj-nextgen-jquery-carousel.1.1.8.zip",{"slug":178,"name":179,"version":180,"author":181,"author_profile":182,"description":183,"short_description":184,"active_installs":185,"downloaded":186,"rating":127,"num_ratings":187,"last_updated":188,"tested_up_to":189,"requires_at_least":143,"requires_php":119,"tags":190,"homepage":119,"download_link":191,"security_score":147,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"nextgen-nivoslider","NextGen NivoSlider","3.2.7","Aldert Vaandering","https:\u002F\u002Fprofiles.wordpress.org\u002Fpaperfeed\u002F","\u003Cp>NextGen NivoSlider allows you to create a \u003Ca href=\"http:\u002F\u002Fnivo.dev7studios.com\u002F\" rel=\"nofollow ugc\">NivoSlider\u003C\u002Fa> as a widget or with a shortcode.\u003Cbr \u002F>\nThis plugin uses the ‘NextGen Gallery’ plugin to obtain the images using tags or gallery IDs.\u003C\u002Fp>\n\u003Cp>NivoSlider is a great responsive image slideshow that is highly customizable. With a large array of effects and many additional options you are sure to find a combination that will suit your website.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Requirements:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fnextgen-gallery\u002F\" rel=\"ugc\">NextGen Gallery Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>NextGen NivoSlider has been completely overhauled and is continually being added to. It currently supports all the of NivoSlider’s original functions and even has some extra’s!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Responsive!\u003C\u002Fli>\n\u003Cli>Fully integrated with NextGen gallery\u003C\u002Fli>\n\u003Cli>Theme support\u003C\u002Fli>\n\u003Cli>Automatic URL linking (put a mailto:, http:\u002F\u002F, ftp:\u002F\u002F or local \u002F into your alt text)\u003C\u002Fli>\n\u003Cli>Extra effect(s)\u003C\u002Fli>\n\u003Cli>Shortcode and Widget support\u003C\u002Fli>\n\u003Cli>Touchscreen support (experimental)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Parameters:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can use the following parameters in the [ngg-nivoslider] shortcode.\u003Cbr \u002F>\nDefaults, where applicable, are shown between parentheses (), available options between brackets [].\u003C\u002Fp>\n\u003Cul>\n\u003Cli>title: Title for slider. Leave blank for no title. (ex: title=”My Slider”)\u003C\u002Fli>\n\u003Cli>gallery: Leave blank to use all galleries or choose a gallery to use. (ex: gallery=”galleryid”)\u003C\u002Fli>\n\u003Cli>order [random”|”asc”|”desc”|”sortorder”]: Order to display results in. You can choose; Random, Latest First, Oldest First, or NextGen Sortorder. Random will still work when a page is cached. (ex: order=”random”)\u003C\u002Fli>\n\u003Cli>tags: comma separated list of tags to filter results by. (ex: tags=”tag1, tag2″)\u003C\u002Fli>\n\u003Cli>shuffle [boolean]: If order is random and this is true will shuffle images with javascript. Useful if your are caching your pages. (ex: shuffle=”true”)\u003C\u002Fli>\n\u003Cli>max_pictures: The maximum amount of pictures to load. (ex: max_pictures=”6″)\u003C\u002Fli>\n\u003Cli>html_id (“slider”): HTML id to use. Defaults to ‘slider’. Needs to be different for multiple sliders on same page. (ex: html_id=”custom-slider”)\u003C\u002Fli>\n\u003Cli>width: Width to use on slider. (ex: width=”200″)\u003C\u002Fli>\n\u003Cli>height: Height to use on slider. (ex: height=”150″)\u003C\u002Fli>\n\u003Cli>center: Centers content in container. Requires width to be set. (ex: center=”1″)\u003C\u002Fli>\n\u003Cli>resize: Resizes the images using TimThumb(v2). Available options are: (ex: resize=”3″)\u003Cbr \u002F>\n      1 – Resize to Fit specified dimensions (no cropping)\u003Cbr \u002F>\n      2 – Crop and resize to best fit the dimensions (default)\u003Cbr \u002F>\n      3 – Resize proportionally to fit entire image into specified dimensions, and add borders if required\u003Cbr \u002F>\n      4 – Resize proportionally adjusting size of scaled image so there are no borders gaps\u003C\u002Fli>\n\u003Cli>resizewidth: The width TimThumb will use to resize the image (sc: resizewidth=”800″)\u003C\u002Fli>\n\u003Cli>resizeheight: The height TimThumb will use to resize the image (sc: resizeheight=”600″)\u003C\u002Fli>\n\u003Cli>resizebg (“ffffff”): The color (denoted in hex) to use for the borders that are generated when using resizing option 3 (ex: resizebg=”a0fb69″)\u003C\u002Fli>\n\u003Cli>caption [“alttext”|”description”|”both”]: Show a caption with the slide, showing either the alttext or description as set up in NextGen gallery or both as “Bolded AltText – Description”\u003C\u002Fli>\n\u003Cli>htmlcaption: HTML formatted caption to show on all images (ex: htmlcaption=”\u003Cstrong>Title\u003C\u002Fstrong> Welcome to \u003Ca>this website\u003C\u002Fa>“)\u003C\u002Fli>\n\u003Cli>showgallerytitle [boolean]: Display the gallery title (ex: showgallerytitle=”true”)\u003C\u002Fli>\n\u003Cli>showgallerydesc [boolean]: Display the gallery description  (ex: showgallerydesc=”true”)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Nivo slider settings:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Please check the NivoSlider website for \u003Ca href=\"http:\u002F\u002Fnivo.dev7studios.com\u002F#usage\" rel=\"nofollow ugc\">more details\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>effect: What effect to use as transition. You can specify sets like: ‘fold,fade,sliceDown’. See list below for available effects.(ex: effect=”sliceDown,sliceUp”)\u003C\u002Fli>\n\u003Cli>slices: The amount of slices to divide the image to for the slice effects(ex: slices=”3″)\u003C\u002Fli>\n\u003Cli>boxCols: Amount of columns to split the image into for the box effects (ex: boxcols=”10″)\u003C\u002Fli>\n\u003Cli>boxRows: Amount of row to split the image into for the box effects (ex: boxrows=”8″)\u003C\u002Fli>\n\u003Cli>animSpeed: Slide transition speed in milliseconds (1000ms = 1 second). (ex: animspeed=”300″)\u003C\u002Fli>\n\u003Cli>pauseTime: Time to pause in milliseconds (1000ms = 1 second) before continueing to the next image (ex: pausetime=”5000″)\u003C\u002Fli>\n\u003Cli>startSlide: Set starting Slide. It’s 0-index so use 0 for the first slide. (ex: startslide=”3″)\u003C\u002Fli>\n\u003Cli>directionNav [“true”|”false”]: Whether to display the Next & Prev controls or not. (ex: directionnav=”true”)\u003C\u002Fli>\n\u003Cli>controlNav [“true”|”false”]: 1,2,3… (ex: controlnav=”setting”)\u003C\u002Fli>\n\u003Cli>controlNavThumbs [“true”|”false”]: Use thumbnails for Control Nav if set to true. (ex: controlnavthumbs=”true”)\u003C\u002Fli>\n\u003Cli>thumbsWidth: Resize thumbnail to this width. Recommended to set if using thumbnails. (ex: thumbswidth=”20″)\u003C\u002Fli>\n\u003Cli>thumbsHeight: Resize thumbnail to this height. Recommended to set if using thumbnails. (ex: thumbsheight=”20″)\u003C\u002Fli>\n\u003Cli>thumbsContainerHeight: Height for thumbnails container. Calculation should be ‘number of thumbnail image rows’ x ‘thumbsheight’. (ex: thumbscontainerheight=”20″)\u003C\u002Fli>\n\u003Cli>thumbsGap: Gap between thumbnails. (ex: thumbsgap=”5″)\u003C\u002Fli>\n\u003Cli>controlNavThumbsFromRel: Use image rel for thumbs. (ex: controlnavthumbsfromrel=”setting”)\u003C\u002Fli>\n\u003Cli>controlNavThumbsSearch: Replace this with… (ex: controlnavthumbssearch=”setting”)\u003C\u002Fli>\n\u003Cli>controlNavThumbsReplace: …this in thumb Image src. (ex: controlnavthumbsreplace=”setting”)\u003C\u002Fli>\n\u003Cli>keyboardNav: Use left & right arrows. (ex: keyboardnav=”setting”)\u003C\u002Fli>\n\u003Cli>pauseOnHover: Stop animation while hovering. (ex: pauseonhover=”setting”)\u003C\u002Fli>\n\u003Cli>manualAdvance: Force manual transitions. (ex: manualadvance=”setting”)\u003C\u002Fli>\n\u003Cli>prexText: Text to display for previous (ex: prevtext=”prev”)\u003C\u002Fli>\n\u003Cli>nextText: Text to display for next (ex: prevtext=”next”)\u003C\u002Fli>\n\u003Cli>randomStart [“true”|”false”]: Start with a random slide (ex: randomstart=”true”)\u003C\u002Fli>\n\u003Cli>captionOpacity: Universal caption opacity. (ex: captionopacity=”setting”)\u003C\u002Fli>\n\u003Cli>disableCaptions: (ex: disablecaptions=”1″)\u003C\u002Fli>\n\u003Cli>beforeChange: (ex: beforechange=”setting”)\u003C\u002Fli>\n\u003Cli>afterChange: (ex: afterchange=”setting”)\u003C\u002Fli>\n\u003Cli>slideshowEnd: Triggers after all slides have been shown. (ex: slideshowend=”setting”)\u003C\u002Fli>\n\u003Cli>lastSlide: Triggers when last slide is shown. (ex: lastslide=”setting”)\u003C\u002Fli>\n\u003Cli>afterLoad: Triggers when slider has loaded. (ex: afterload=”setting”)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Nivo Effects:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>random\u003C\u002Fli>\n\u003Cli>sliceDown\u003C\u002Fli>\n\u003Cli>sliceDownLeft\u003C\u002Fli>\n\u003Cli>sliceUp\u003C\u002Fli>\n\u003Cli>sliceUpLeft\u003C\u002Fli>\n\u003Cli>sliceUpDown\u003C\u002Fli>\n\u003Cli>sliceUpDownLeft\u003C\u002Fli>\n\u003Cli>fold\u003C\u002Fli>\n\u003Cli>foldReverse\u003C\u002Fli>\n\u003Cli>fade\u003C\u002Fli>\n\u003Cli>slideInRight\u003C\u002Fli>\n\u003Cli>slideInLeft\u003C\u002Fli>\n\u003Cli>boxRandom\u003C\u002Fli>\n\u003Cli>boxRain\u003C\u002Fli>\n\u003Cli>boxRainReverse\u003C\u002Fli>\n\u003Cli>boxRainGrow\u003C\u002Fli>\n\u003Cli>boxRainGrowReverse\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Shortcode examples:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>[ngg-nivoslider html_id=”about-slider”]\u003C\u002Fli>\n\u003Cli>[ngg-nivoslider title=”Hello” gallery=”1″ html_id=”about-slider” width=”200″ height=”150″ center=”1″]\u003C\u002Fli>\n\u003Cli>[ngg-nivoslider html_id=”about-slider” directionnav=”false” controlnav=”false”]\u003C\u002Fli>\n\u003Cli>[ngg-nivoslider tags=slideshow order=”random” effect=”fade” shuffle=”true” max_pictures=”12″ html_id=”slider” resizebg=”fdfdfd” resizewidth=”900″ resizeheight=”620″ resize=”3″ center=”1″ directionNav=”false” controlNav=”false” pauseTime=”10000″ animSpeed=”1000″ pauseOnHover=”false”]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>To do\u003C\u002Fh3>\n\u003Cp>Feel free to suggest new features or things you’d like to see in this plugin!\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Create some extra themes.\u003C\u002Fli>\n\u003Cli>Scrollable thumbnails?\u003C\u002Fli>\n\u003C\u002Ful>\n","The NextGen Nivoslider plugin allows you to create a NivoSlider, using images from your NextGen gallery, with a simple shortcode or widget.",300,27192,8,"2013-10-03T07:13:00.000Z","3.6.1",[20,21,22,23,145],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnextgen-nivoslider.3.2.7.zip",{"attackSurface":193,"codeSignals":286,"taintFlows":374,"riskAssessment":518,"analyzedAt":531},{"hooks":194,"ajaxHandlers":246,"restRoutes":259,"shortcodes":260,"cronEvents":285,"entryPointCount":100,"unprotectedCount":159},[195,201,203,205,207,212,217,220,224,227,231,234,237,240,243],{"type":196,"name":197,"callback":198,"file":199,"line":200},"action","admin_notices","closure","inc\\admin.php",244,{"type":196,"name":197,"callback":198,"file":199,"line":202},248,{"type":196,"name":197,"callback":198,"file":199,"line":204},688,{"type":196,"name":197,"callback":198,"file":199,"line":206},692,{"type":196,"name":208,"callback":209,"file":210,"line":211},"wp_enqueue_scripts","scripts","picture-gallery.php",200,{"type":213,"name":214,"callback":215,"priority":61,"file":210,"line":216},"filter","the_content","wpautop",213,{"type":213,"name":214,"callback":218,"priority":158,"file":210,"line":219},"shortcode_unautop",215,{"type":196,"name":221,"callback":222,"file":210,"line":223},"before_delete_post","picture_delete",221,{"type":213,"name":214,"callback":225,"file":210,"line":226},"picture_page",224,{"type":196,"name":228,"callback":229,"priority":29,"file":210,"line":230},"init","picture_post",1789,{"type":196,"name":232,"callback":232,"file":210,"line":233},"admin_menu",1790,{"type":196,"name":235,"callback":235,"priority":158,"file":210,"line":236},"admin_bar_menu",1791,{"type":196,"name":238,"callback":238,"file":210,"line":239},"plugins_loaded",1793,{"type":213,"name":241,"callback":241,"file":210,"line":242},"archive_template",1796,{"type":213,"name":244,"callback":244,"file":210,"line":245},"single_template",1799,[247,251,254,257],{"action":248,"nopriv":249,"callback":248,"hasNonce":249,"hasCapCheck":249,"file":210,"line":250},"vwpg_pictures",false,246,{"action":248,"nopriv":252,"callback":248,"hasNonce":249,"hasCapCheck":249,"file":210,"line":253},true,247,{"action":255,"nopriv":249,"callback":255,"hasNonce":252,"hasCapCheck":252,"file":210,"line":256},"vwpg_upload",250,{"action":255,"nopriv":249,"callback":255,"hasNonce":252,"hasCapCheck":252,"file":210,"line":258},1802,[],[261,264,267,270,273,276,279,282],{"tag":262,"callback":262,"file":210,"line":263},"videowhisper_picture_upload_guest",227,{"tag":265,"callback":265,"file":210,"line":266},"videowhisper_pictures",229,{"tag":268,"callback":268,"file":210,"line":269},"videowhisper_picture",230,{"tag":271,"callback":271,"file":210,"line":272},"videowhisper_picture_preview",231,{"tag":274,"callback":274,"file":210,"line":275},"videowhisper_picture_upload",233,{"tag":277,"callback":277,"file":210,"line":278},"videowhisper_picture_import",234,{"tag":280,"callback":280,"file":210,"line":281},"videowhisper_postpictures",236,{"tag":283,"callback":283,"file":210,"line":284},"videowhisper_postpictures_process",237,[],{"dangerousFunctions":287,"sqlUsage":288,"outputEscaping":290,"fileOperations":371,"externalRequests":61,"nonceChecks":372,"capabilityChecks":187,"bundledLibraries":373},[],{"prepared":84,"raw":29,"locations":289},[],{"escaped":291,"rawEcho":292,"locations":293},346,38,[294,297,299,301,303,305,307,310,312,314,316,318,320,322,324,326,328,330,332,334,336,338,340,342,344,346,348,350,352,354,356,358,360,362,364,366,368,369],{"file":199,"line":295,"context":296},275,"raw output",{"file":199,"line":298,"context":296},705,{"file":199,"line":300,"context":296},711,{"file":199,"line":302,"context":296},1134,{"file":199,"line":304,"context":296},1136,{"file":199,"line":306,"context":296},1148,{"file":308,"line":309,"context":296},"inc\\shortcodes.php",671,{"file":308,"line":311,"context":296},681,{"file":308,"line":313,"context":296},685,{"file":308,"line":315,"context":296},716,{"file":308,"line":317,"context":296},728,{"file":308,"line":319,"context":296},758,{"file":308,"line":321,"context":296},765,{"file":308,"line":323,"context":296},766,{"file":308,"line":325,"context":296},767,{"file":308,"line":327,"context":296},768,{"file":308,"line":329,"context":296},772,{"file":308,"line":331,"context":296},773,{"file":308,"line":333,"context":296},774,{"file":308,"line":335,"context":296},778,{"file":308,"line":337,"context":296},788,{"file":308,"line":339,"context":296},793,{"file":308,"line":341,"context":296},801,{"file":308,"line":343,"context":296},807,{"file":308,"line":345,"context":296},861,{"file":308,"line":347,"context":296},879,{"file":308,"line":349,"context":296},887,{"file":308,"line":351,"context":296},895,{"file":308,"line":353,"context":296},898,{"file":308,"line":355,"context":296},901,{"file":308,"line":357,"context":296},908,{"file":210,"line":359,"context":296},326,{"file":210,"line":361,"context":296},330,{"file":210,"line":363,"context":296},334,{"file":210,"line":365,"context":296},345,{"file":210,"line":367,"context":296},349,{"file":210,"line":11,"context":296},{"file":370,"line":187,"context":296},"taxonomy-gallery.php",21,6,[],[375,392,402,410,424,434,447,458,484,509],{"entryPoint":376,"graph":377,"unsanitizedCount":159,"severity":40},"adminManage (inc\\admin.php:1157)",{"nodes":378,"edges":390},[379,384],{"id":380,"type":381,"label":382,"file":199,"line":383},"n0","source","$_GET (x2)",1167,{"id":385,"type":386,"label":387,"file":199,"line":388,"wp_function":389},"n1","sink","echo() [XSS]",1168,"echo",[391],{"from":380,"to":385,"sanitized":249},{"entryPoint":393,"graph":394,"unsanitizedCount":29,"severity":401},"adminOptions (inc\\admin.php:214)",{"nodes":395,"edges":399},[396,398],{"id":380,"type":381,"label":397,"file":199,"line":295},"$_SERVER['REQUEST_URI']",{"id":385,"type":386,"label":387,"file":199,"line":295,"wp_function":389},[400],{"from":380,"to":385,"sanitized":252},"low",{"entryPoint":403,"graph":404,"unsanitizedCount":29,"severity":401},"adminImport (inc\\admin.php:669)",{"nodes":405,"edges":408},[406,407],{"id":380,"type":381,"label":397,"file":199,"line":300},{"id":385,"type":386,"label":387,"file":199,"line":300,"wp_function":389},[409],{"from":380,"to":385,"sanitized":252},{"entryPoint":411,"graph":412,"unsanitizedCount":29,"severity":401},"\u003Cadmin> (inc\\admin.php:0)",{"nodes":413,"edges":421},[414,416,417,419],{"id":380,"type":381,"label":415,"file":199,"line":295},"$_SERVER['REQUEST_URI'] (x2)",{"id":385,"type":386,"label":387,"file":199,"line":295,"wp_function":389},{"id":418,"type":381,"label":382,"file":199,"line":383},"n2",{"id":420,"type":386,"label":387,"file":199,"line":388,"wp_function":389},"n3",[422,423],{"from":380,"to":385,"sanitized":252},{"from":418,"to":420,"sanitized":252},{"entryPoint":425,"graph":426,"unsanitizedCount":29,"severity":401},"vwpg_pictures (inc\\shortcodes.php:506)",{"nodes":427,"edges":432},[428,431],{"id":380,"type":381,"label":429,"file":308,"line":430},"$_GET (x13)",521,{"id":385,"type":386,"label":387,"file":308,"line":311,"wp_function":389},[433],{"from":380,"to":385,"sanitized":252},{"entryPoint":435,"graph":436,"unsanitizedCount":29,"severity":401},"videowhisper_picture_upload_guest (inc\\shortcodes.php:1119)",{"nodes":437,"edges":445},[438,441],{"id":380,"type":381,"label":439,"file":308,"line":440},"$_POST",1197,{"id":385,"type":386,"label":442,"file":308,"line":443,"wp_function":444},"wp_remote_get() [SSRF]",1202,"wp_remote_get",[446],{"from":380,"to":385,"sanitized":252},{"entryPoint":448,"graph":449,"unsanitizedCount":29,"severity":401},"\u003Cshortcodes> (inc\\shortcodes.php:0)",{"nodes":450,"edges":455},[451,452,453,454],{"id":380,"type":381,"label":429,"file":308,"line":430},{"id":385,"type":386,"label":387,"file":308,"line":311,"wp_function":389},{"id":418,"type":381,"label":439,"file":308,"line":440},{"id":420,"type":386,"label":442,"file":308,"line":443,"wp_function":444},[456,457],{"from":380,"to":385,"sanitized":252},{"from":418,"to":420,"sanitized":252},{"entryPoint":459,"graph":460,"unsanitizedCount":29,"severity":401},"vwpg_upload (picture-gallery.php:424)",{"nodes":461,"edges":480},[462,465,467,470,474,477],{"id":380,"type":381,"label":463,"file":210,"line":464},"$_FILES (x2)",524,{"id":385,"type":386,"label":387,"file":210,"line":466,"wp_function":389},555,{"id":418,"type":381,"label":468,"file":210,"line":469},"$_SERVER",568,{"id":420,"type":386,"label":471,"file":210,"line":472,"wp_function":473},"file_put_contents() [File Write]",591,"file_put_contents",{"id":475,"type":381,"label":476,"file":210,"line":469},"n4","$_SERVER (x6)",{"id":478,"type":386,"label":387,"file":210,"line":479,"wp_function":389},"n5",596,[481,482,483],{"from":380,"to":385,"sanitized":252},{"from":418,"to":420,"sanitized":252},{"from":475,"to":478,"sanitized":252},{"entryPoint":485,"graph":486,"unsanitizedCount":29,"severity":401},"\u003Cpicture-gallery> (picture-gallery.php:0)",{"nodes":487,"edges":504},[488,489,490,491,492,494,495,499],{"id":380,"type":381,"label":463,"file":210,"line":464},{"id":385,"type":386,"label":387,"file":210,"line":466,"wp_function":389},{"id":418,"type":381,"label":468,"file":210,"line":469},{"id":420,"type":386,"label":471,"file":210,"line":472,"wp_function":473},{"id":475,"type":381,"label":493,"file":210,"line":469},"$_SERVER (x7)",{"id":478,"type":386,"label":387,"file":210,"line":479,"wp_function":389},{"id":496,"type":381,"label":497,"file":210,"line":498},"n6","$_GET",755,{"id":500,"type":386,"label":501,"file":210,"line":502,"wp_function":503},"n7","get_var() [SQLi]",780,"get_var",[505,506,507,508],{"from":380,"to":385,"sanitized":252},{"from":418,"to":420,"sanitized":252},{"from":475,"to":478,"sanitized":252},{"from":496,"to":500,"sanitized":252},{"entryPoint":510,"graph":511,"unsanitizedCount":61,"severity":517},"videowhisper_postpictures_process (picture-gallery.php:734)",{"nodes":512,"edges":515},[513,514],{"id":380,"type":381,"label":497,"file":210,"line":498},{"id":385,"type":386,"label":501,"file":210,"line":502,"wp_function":503},[516],{"from":380,"to":385,"sanitized":249},"high",{"summary":519,"deductions":520},"The 'picture-gallery' plugin v1.6.4 presents a mixed security posture. On the positive side, it demonstrates good practices with 100% of SQL queries using prepared statements and a high percentage (90%) of output escaping. The absence of bundled libraries and a history of zero currently unpatched CVEs are also strengths. However, there are notable areas for concern. The presence of 2 AJAX handlers without authentication checks creates a direct attack vector. Furthermore, taint analysis revealed 2 flows with unsanitized paths, including one of high severity, indicating potential for data manipulation or code execution if these paths are exploited. The plugin's history of 5 medium-severity CVEs, primarily related to Cross-site Scripting, suggests recurring issues with input sanitization in the past, even though none are currently unpatched. This pattern, combined with the identified unsanitized paths, warrants caution.  While the plugin has made strides in secure coding practices, the unprotected entry points and taint analysis findings are significant risks that need immediate attention to improve its overall security.",[521,524,526,528],{"reason":522,"points":523},"Unprotected AJAX handlers",10,{"reason":525,"points":523},"High severity unsanitized path flow",{"reason":527,"points":28},"Unsanitized path flow (low severity)",{"reason":529,"points":530},"Medium severity CVE history (5 total)",15,"2026-03-16T19:47:15.479Z",{"wat":533,"direct":542},{"assetPaths":534,"generatorPatterns":537,"scriptPaths":538,"versionParams":539},[535,536],"\u002Fwp-content\u002Fplugins\u002Fpicture-gallery\u002Fcss\u002Fpicture-gallery.css","\u002Fwp-content\u002Fplugins\u002Fpicture-gallery\u002Fjs\u002Fpicture-gallery-frontend.js",[],[536],[540,541],"picture-gallery\u002Fcss\u002Fpicture-gallery.css?ver=","picture-gallery\u002Fjs\u002Fpicture-gallery-frontend.js?ver=",{"cssClasses":543,"htmlComments":548,"htmlAttributes":549,"restEndpoints":553,"jsGlobals":554,"shortcodeOutput":556},[4,544,545,546,547],"picture-gallery-thumbnails","picture-gallery-item","picture-gallery-thumb","picture-gallery-details",[],[550,551,552],"data-gallery-id","data-picture-id","data-thumb-url",[],[555],"picture_gallery_vars",[557,558],"[picture-gallery]","[picture-gallery-uploader]"]