Video Gallery Block Security & Risk Analysis

wordpress.org/plugins/video-gallery-block

Create responsive video galleries with YouTube, Vimeo, albums, filters, and lightbox popups in Gutenberg.

1K active installs v1.4.1 PHP 7.4+ WP 6.5+ Updated Jul 18, 2026
blockvideo-galleryvideo-playlistvimeo-galleryyoutube-gallery
99
A · Safe
CVEs total1
Unpatched0
Last CVEJul 4, 2025
Download
Safety Verdict

Is Video Gallery Block Safe to Use in 2026?

Generally Safe

Score 99/100

Video Gallery Block has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Jul 4, 2025Updated 1mo ago
Risk Assessment

The video-gallery-block plugin v1.1.1 exhibits a generally good security posture based on the static analysis. All identified entry points, including AJAX handlers and shortcodes, appear to have proper authentication and capability checks, and no unprotected entry points were found. The code demonstrates strong adherence to secure coding practices with 100% of SQL queries using prepared statements and all output being properly escaped. There are no file operations or external HTTP requests, further reducing the attack surface. Taint analysis also shows no identified vulnerabilities related to unsanitized paths.

Key Concerns

  • Past medium severity vulnerability
  • Bundled Freemius library
Vulnerabilities
1 published

Video Gallery Block Security Vulnerabilities

CVEs by Year

1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2025-27326medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Video Gallery Block – Display your videos as a gallery in a professional way <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jul 4, 2025 Patched in 1.1.1 (43d)
Version History

Video Gallery Block Release Timeline

v1.4.1Current
v1.4.0
v1.1.3
v1.1.2
v1.1.1
v1.1.01 CVE
v1.0.81 CVE
v1.0.71 CVE
v1.0.61 CVE
v1.0.51 CVE
v1.0.41 CVE
v1.0.31 CVE
v1.0.21 CVE
v1.0.11 CVE
v1.0.01 CVE
Code Analysis
Analyzed Mar 16, 2026

Video Gallery Block Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
9 escaped
Nonce Checks
2
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius

Output Escaping

100% escaped9 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
handle_disabled_blocks (includes\class-vgb-rest-handler.php:31)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Video Gallery Block Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 3

authwp_ajax_vgb_disabled_blocksincludes\class-vgb-rest-handler.php:17
authwp_ajax_vgbPremiumCheckerincludes\class-vgb-rest-handler.php:20
noprivwp_ajax_vgbPremiumCheckerincludes\class-vgb-rest-handler.php:21

Shortcodes 1

[video_gallery] includes\rootPlugin\inc\ShortCode.php:6
WordPress Hooks 15
actionadmin_initincludes\class-vgb-rest-handler.php:24
actionrest_api_initincludes\class-vgb-rest-handler.php:25
actionadmin_menuincludes\rootPlugin\inc\AdminMenu.php:7
filtermanage_video-gallery-block_posts_columnsincludes\rootPlugin\inc\CustomColumn.php:7
actionmanage_video-gallery-block_posts_custom_columnincludes\rootPlugin\inc\CustomColumn.php:12
actionadmin_enqueue_scriptsincludes\rootPlugin\inc\Enqueue.php:7
actioninitincludes\rootPlugin\inc\Init.php:9
filterblock_editor_settings_allincludes\rootPlugin\inc\Init.php:10
actionload-plugin-editor.phpincludes\utility\functions.php:13
actionenqueue_block_assetsindex.php:48
actionwp_enqueue_scriptsindex.php:49
actionenqueue_block_editor_assetsindex.php:50
filterdefault_titleindex.php:51
filterdefault_contentindex.php:52
filterblock_categories_allindex.php:124
Maintenance & Trust

Video Gallery Block Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 18, 2026
PHP min version7.4
Downloads27K

Community Trust

Rating84/100
Number of ratings6
Active installs1K
Developer Profile

Video Gallery Block Developer Profile

colorlibplugins

124 plugins · 730K total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
124 days
View full developer profile
Detection Fingerprints

How We Detect Video Gallery Block

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/video-gallery-block/public/js/isotope.pkgd.min.js/wp-content/plugins/video-gallery-block/public/js/plyr.js/wp-content/plugins/video-gallery-block/public/css/plyr.css/wp-content/plugins/video-gallery-block/build/admin/post.js/wp-content/plugins/video-gallery-block/build/admin/post.css/wp-content/plugins/video-gallery-block/build/admin/dashboard.js/wp-content/plugins/video-gallery-block/build/admin/dashboard.css
Script Paths
build/admin/post.jsbuild/admin/dashboard.js
Version Parameters
video-gallery-block/build/admin/post.js?ver=video-gallery-block/build/admin/post.css?ver=video-gallery-block/build/admin/dashboard.js?ver=video-gallery-block/build/admin/dashboard.css?ver=

HTML / DOM Fingerprints

CSS Classes
vgb-video-gallery-block-wrapper
Data Attributes
data-vgb-id
JS Globals
vgbDisabledBlocksvgbpipecheckvgbAdmin
Shortcode Output
[video_gallery id=
FAQ

Frequently Asked Questions about Video Gallery Block