WP News Photo Gallery Security & Risk Analysis

wordpress.org/plugins/wp-news-photo-gallery

WP News Photo Gallery is a WordPress plugin to create photo gallery on your WordPress website! View "Photo Gallery" page for photo gallery …

0 active installs v1.0.1 PHP + WP 5.0+ Updated Feb 27, 2019
galleryimage-galleryphoto-galleryresponsive-gallerywordpress-image-gallery
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP News Photo Gallery Safe to Use in 2026?

Generally Safe

Score 85/100

WP News Photo Gallery has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The "wp-news-photo-gallery" plugin v1.0.1 exhibits a generally positive security posture, with no known vulnerabilities in its history and a clean taint analysis, indicating no critical or high-severity code flaws were detected. The plugin demonstrates good security practices by utilizing prepared statements for all SQL queries and incorporating nonce and capability checks for its single entry point (the shortcode). The limited attack surface of one shortcode with checks is a strength. However, a significant concern is the low percentage of properly escaped output (8%). This suggests a substantial risk of Cross-Site Scripting (XSS) vulnerabilities, as user-supplied data, if not properly sanitized before being displayed, could be injected into the page and executed by a user's browser. While the plugin's direct vulnerabilities are currently absent, the weak output escaping is a notable weakness that requires immediate attention to prevent potential attacks.

Key Concerns

  • Low percentage of properly escaped output
Vulnerabilities
None known

WP News Photo Gallery Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

WP News Photo Gallery Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
24
2 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

8% escaped26 total outputs
Attack Surface

WP News Photo Gallery Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[WPNPG-GALLERY] wp-news-photo-gallery.php:342
WordPress Hooks 10
actioninitwp-news-photo-gallery.php:77
actioninitwp-news-photo-gallery.php:102
actionadmin_enqueue_scriptswp-news-photo-gallery.php:114
actionwp_footerwp-news-photo-gallery.php:213
filtersingle_templatewp-news-photo-gallery.php:224
filterarchive_templatewp-news-photo-gallery.php:235
actionafter_setup_themewp-news-photo-gallery.php:241
actionadd_meta_boxeswp-news-photo-gallery.php:243
actionsave_postwp-news-photo-gallery.php:244
actionadmin_initwp-news-photo-gallery.php:371
Maintenance & Trust

WP News Photo Gallery Maintenance & Trust

Maintenance Signals

WordPress version tested5.1.22
Last updatedFeb 27, 2019
PHP min version
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

WP News Photo Gallery Developer Profile

Hasibul Islam Badsha

4 plugins · 50 total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP News Photo Gallery

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-news-photo-gallery/css/wpnpg.css/wp-content/plugins/wp-news-photo-gallery/css/wpnpg-custom.css/wp-content/plugins/wp-news-photo-gallery/css/bootstrap.css/wp-content/plugins/wp-news-photo-gallery/js/jquery.flexslider.js/wp-content/plugins/wp-news-photo-gallery/css/wpnpg-admin.css/wp-content/plugins/wp-news-photo-gallery/js/cp-active.js
Script Paths
/wp-content/plugins/wp-news-photo-gallery/js/jquery.flexslider.js/wp-content/plugins/wp-news-photo-gallery/js/cp-active.js

HTML / DOM Fingerprints

CSS Classes
wpnpg-containerwpnpg-sectionwpnpg-rowwpnpg-caption
JS Globals
jQuery
Shortcode Output
<div class="wpnpg-container wpnpg-section"> <div class="wpnpg-row"> <div id="slider" class="flexslider"> <ul class="slides"> <li> <a href="" target="_blank"><img src="
FAQ

Frequently Asked Questions about WP News Photo Gallery