Photo Gallery – Image, Video & Portfolio

Photo Gallery – Image, Video & Portfolio has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (100%).

The one issue recorded for Photo Gallery – Image, Video & Portfolio has a vendor fix available, so running the current release closes it.

All of these findings were reported by Francesco Carlucci. Photo Gallery – Image, Video & Portfolio is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh
7.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Photo Gallery – Image, Video & Portfolio vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2024-1896

Photo Gallery <= 1.4.2 - Authenticated(Contributor+) PHP Object Injection via Shortcode

Read the full analysis

Vulnerability Records

1 records
Photo Gallery – Image, Video & Portfolio banner
Latestv2.0.3

Photo Gallery – Image, Video & Portfolio

A WP Life

Author

A WP Life

4.8(13)
96/100
Last Updated
2026-08-20 (24d ago)
Active Installs
1,000+
Downloads
167,853
Requires WP
4.0+
Requires PHP
7.0+
Tested up to
WP 7.1
Created
2016-10-03 (10y ago)

Photo Gallery is a fast, lightweight WordPress plugin designed to help you create stunning photo galleries and video galleries in minutes. Built with a native CSS Grid engine, it delivers high performance and mobile responsiveness across all devices and theme layouts. Easily add YouTube videos simply by pasting their video links—the plugin automatically fetches high-resolution cover posters for seamless video display. Include photos and videos in the same gallery, customize grid columns, adjust hover effects, and enable interactive lightbox popups. Works effortlessly with WordPress Gutenberg blocks, Elementor page builder, and traditional shortcodes. Its Premium Version Name is Video Gallery Premium. Premium Live Demo Get Video Gallery Premium Key Features Native CSS Grid layout for maximum page loading speed and mobile responsiveness. Unified photo gallery and video gallery capabilities to display mixed media. Video Poster Manager to automatically fetch YouTube and Vimeo video thumbnails. Modern lightbox popup with thumbnail navigation strip and loop toggle. Grayscale filter with customizable hover percentage transitions. Custom grid column spacing and padding adjustments. Integrated shortcode generator and Elementor widget support. Gutenberg block integration for live backend preview. Upgrade to Video Gallery Premium The official premium counterpart is Video Gallery Premium. Upgrading unlocks features such as: * Pinterest-style masonry grid layouts. * Native API syncing for YouTube, Vimeo, Twitch Helix, TikTok, Dailymotion, Wistia, and Meta Reels. * Server-side AJAX pagination and Load More button for large collections. * Duplicate gallery action tool for CPT lists. * Custom redirect targets to send visitors to targeted URLs on slide click. * Chart.js analytics tracking for video plays and views. * Advanced lightbox settings, custom play icons, and priority support.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C