Does Sell Photo have any unpatched vulnerabilities?

No. All known vulnerabilities in Sell Photo have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Sell Photo compatible with WordPress 6.3.8?

According to WordPress.org data, Sell Photo 1.0.7 has been tested up to WordPress 6.3.8. Check the plugin's changelog for the latest compatibility information.

How often is Sell Photo updated?

Sell Photo was last updated on Sep 11, 2023. Frequent updates are generally a positive security signal.

What is Sell Photo's security score?

Sell Photo has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Sell Photo Security & Risk Analysis

wordpress.org/plugins/sell-photo

Sell photo in WordPress by turning your site into e-commerce photo store. WordPress plugin for photographers to sell image, picture or photo print.

10 active installs v1.0.7 PHP + WP 6.3+ Updated Sep 11, 2023

ecommercegalleryimagepaypalphoto

A · Safe

CVEs total1

Unpatched0

Last CVEAug 14, 2020

Plugin page Download

Safety Verdict

Is Sell Photo Safe to Use in 2026?

Generally Safe

Score 85/100

Sell Photo has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Aug 14, 2020Updated 2yr ago

Risk Assessment

The "sell-photo" v1.0.7 plugin exhibits a generally good security posture based on the static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points suggests a minimal attack surface. Furthermore, the code signals indicate strong adherence to secure coding practices, with no dangerous functions, all SQL queries using prepared statements, a high percentage of properly escaped output, and the presence of nonce and capability checks. The taint analysis also shows no unsanitized paths, which is a positive sign.

Key Concerns

Medium severity vulnerability history
One prior vulnerability

Vulnerabilities

Sell Photo Security Vulnerabilities

CVEs by Year

1 CVE in 2020

2020

Patched Has unpatched

Severity Breakdown

Medium

1 total CVE

WF-8223f9dd-1c2d-40bd-a17d-1bb317829d3b-sell-photomedium · 5.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Sell Photo <= 1.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting

Aug 14, 2020 Patched in 1.0.6 (1257d)

Code Analysis

Analyzed Mar 16, 2026

Sell Photo Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

24 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

92% escaped26 total outputs

Data Flows

All sanitized

Data Flow Analysis

2 flows

general_settings (main.php:157)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Sell Photo Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 4

actionadmin_menumain.php:33

filterpost_gallerymain.php:34

actionplugins_loadedmain.php:39

filterplugin_action_linksmain.php:45

Maintenance & Trust

Sell Photo Maintenance & Trust

Maintenance Signals

WordPress version tested6.3.8

Last updatedSep 11, 2023

PHP min version

Downloads7K

Community Trust

Rating20/100

Number of ratings1

Active installs10

Alternatives

Sell Photo Alternatives

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery

nextgen-gallery

The most popular gallery plugin that lets you create galleries and albums in seconds.

400K 37 CVEs

Firelight Lightbox

easy-fancybox

Formerly Easy Fancybox. The most popular WordPress lightbox plugin. Simple, fast, and responsive. Opens images, videos, PDFs, and custom popups.

200K 5 CVEs

Photo Gallery by 10Web – Mobile-Friendly Image Gallery

photo-gallery

Photo Gallery is a powerful image gallery plugin with a list of advanced options for creating responsive image galleries with beautiful lightbox.

200K 1 unpatched

Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More

envira-gallery-lite

Envira Gallery is a fast, easy and powerful gallery builder with lightbox, masonry and grid layouts, albums, videos, and responsive displays and more

100K 10 CVEs

Gallery by FooGallery

foogallery

Photo Gallery, Image Gallery by FooGallery — fast, responsive, SEO-optimized, and packed with beautiful layouts.

100K 20 CVEs

Developer Profile

Sell Photo Developer Profile

Noor Alam

25 plugins · 157K total installs

trust score

Avg Security Score

94/100

Avg Patch Time

450 days

View full developer profile

Detection Fingerprints

How We Detect Sell Photo

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/sell-photo/css/sell-photo.css/wp-content/plugins/sell-photo/js/sell-photo.js

Script Paths

/wp-content/plugins/sell-photo/js/sell-photo.js

Version Parameters

sell-photo/css/sell-photo.css?ver=sell-photo/js/sell-photo.js?ver=

HTML / DOM Fingerprints

CSS Classes

sell-photo-buy-now-button

Shortcode Output

[sell_photo_gallery]

FAQ