WP-Polaroid Plus Security & Risk Analysis

wordpress.org/plugins/polaroid-plus-gallery

Polaroid Plus style picture gallery with Lightbox popups. Uses images from either the Wordpress Media Library or an uploaded directory of images.

10 active installs v1.5 PHP + WP 3.0.1+ Updated Apr 27, 2014
galleriesgalleryimageflowpicturepictures
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP-Polaroid Plus Safe to Use in 2026?

Generally Safe

Score 85/100

WP-Polaroid Plus has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago
Risk Assessment

The plugin "polaroid-plus-gallery" v1.5 exhibits a generally good security posture based on the provided static analysis. The absence of dangerous functions, reliance on prepared statements for SQL queries, and the presence of nonce and capability checks are positive indicators. The limited attack surface, with only one shortcode and no unprotected entry points, is also a strength. Furthermore, the clean vulnerability history with no recorded CVEs suggests a history of stable and secure development.

Key Concerns

  • Low percentage of properly escaped output
Vulnerabilities
None known

WP-Polaroid Plus Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

WP-Polaroid Plus Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
30
2 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

6% escaped32 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
settings_page (wp-polaroidplus.php:414)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

WP-Polaroid Plus Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[wp-polaroidplus] wp-polaroidplus.php:61
WordPress Hooks 5
actionadmin_noticeswp-polaroidplus.php:53
actioninitwp-polaroidplus.php:59
actionadmin_menuwp-polaroidplus.php:60
filterattachment_fields_to_editwp-polaroidplus.php:62
filterattachment_fields_to_savewp-polaroidplus.php:63
Maintenance & Trust

WP-Polaroid Plus Maintenance & Trust

Maintenance Signals

WordPress version tested3.5.2
Last updatedApr 27, 2014
PHP min version
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

WP-Polaroid Plus Developer Profile

Irena0575

3 plugins · 40 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP-Polaroid Plus

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/polaroid-plus-gallery/css/polaroidplus.css/wp-content/plugins/polaroid-plus-gallery/js/polaroidplus.js/wp-content/plugins/polaroid-plus-gallery/js/jquery.js/wp-content/plugins/polaroid-plus-gallery/js/polaroidplus.css.js/wp-content/plugins/polaroid-plus-gallery/img/loading.gif
Script Paths
/wp-content/plugins/polaroid-plus-gallery/js/jquery.js/wp-content/plugins/polaroid-plus-gallery/js/polaroidplus.js/wp-content/plugins/polaroid-plus-gallery/js/polaroidplus.css.js
Version Parameters
polaroid-plus-gallery/css/polaroidplus.css?ver=polaroid-plus-gallery/js/jquery.js?ver=polaroid-plus-gallery/js/polaroidplus.js?ver=polaroid-plus-gallery/js/polaroidplus.css.js?ver=

HTML / DOM Fingerprints

CSS Classes
pp_imageflowpp_loadingpp_imagespp_captionspp_sliderpp_scrollbarpp_imageflow_noscript
Data Attributes
data-style="pp_lightbox"data-description=
JS Globals
polaroidplus_
Shortcode Output
[wp-polaroidplus]
FAQ

Frequently Asked Questions about WP-Polaroid Plus