Yet Another Simple Gallery Security & Risk Analysis
wordpress.org/plugins/yet-another-simple-galleryYasg is short for Yet Another Simple Gallery. It cannot get any simpler than that - imho.
Is Yet Another Simple Gallery Safe to Use in 2026?
Generally Safe
Score 85/100Yet Another Simple Gallery has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The "yet-another-simple-gallery" plugin v1.3 exhibits a generally good security posture based on the static analysis. It has a very small attack surface with only one shortcode as an entry point and no unprotected AJAX handlers or REST API routes. Furthermore, it avoids dangerous functions, file operations, and external HTTP requests, which are common sources of vulnerabilities. The use of prepared statements for all SQL queries is also a significant strength, mitigating risks of SQL injection.
Key Concerns
- Output not properly escaped
- No nonce checks
- No capability checks
Yet Another Simple Gallery Security Vulnerabilities
Yet Another Simple Gallery Code Analysis
Output Escaping
Yet Another Simple Gallery Attack Surface
Shortcodes 1
WordPress Hooks 2
Maintenance & Trust
Yet Another Simple Gallery Maintenance & Trust
Maintenance Signals
Community Trust
Yet Another Simple Gallery Alternatives
Lightbox with PhotoSwipe
lightbox-photoswipe
Integration of PhotoSwipe (http://photoswipe.com) for WordPress.
Social Photo Fetcher
facebook-photo-fetcher
Allows you to automatically create Wordpress photo galleries from Facebook albums. Simple to use and highly customizable.
WoowGallery
woowgallery
Fastest, easiest to use multifunctional image gallery plugin. Create Featured Posts Gallery, Dynamic Content Gallery, Albums!
Responsive Lightbox2
responsive-lightbox2
Add responsive lightbox effect to your images, pop up photos and photo gallery in lightbox
GPP Slideshow
gpp-slideshow
A minimalist slideshow plugin that creates a new gallery post type. Add slideshows to widgets, posts, pages and gallery posts.
Yet Another Simple Gallery Developer Profile
1 plugin · 40 total installs
How We Detect Yet Another Simple Gallery
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/yet-another-simple-gallery/yasg.css/wp-content/plugins/yet-another-simple-gallery/yasg.js/wp-content/plugins/yet-another-simple-gallery/images/prev.png/wp-content/plugins/yet-another-simple-gallery/images/next.png/wp-content/plugins/yet-another-simple-gallery/yasg.jsHTML / DOM Fingerprints
yasg_galleryHoldermainImgHolderlightboxmain_imgimg_captiongallery_thumbsnavArrowsarrow+4 more<!-- Yet-another-simple-gallery plugin --><!-- End Yet-another-simple-gallery-plugin -->id="galleryHolder_id="prev_id="navHolder_id="nav_id="next_yasg_thumb_widthyasg_thumb_heightyasg_full_widthyasg_full_heightyasg_spacing<div class="yasg_galleryHolder"<div class="mainImgHolder"<a href="<img class="main_img"