Photoswipe Masonry

Photoswipe Masonry has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Photoswipe Masonry has a vendor fix available, so running the current release closes it.

All of these findings were reported by Chloe Chamberland. Photoswipe Masonry is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Photoswipe Masonry vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2022-0750

Photoswipe Masonry Gallery <= 1.2.14 Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Photoswipe Masonry banner
Latestv1.3.0
4.5(46)
90/100
Last Updated
2026-10-14 (15d ago)
Active Installs
6,000+
Downloads
179,584
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2014-12-28 (12y ago)

PhotoSwipe Masonry is an image gallery plugin for WordPress built using PhotoSwipe from Dmitry Semenov. photoswipe PhotoSwipe Masonry takes advantage of the built in gallery features of WordPress. Simply use the WordPress admin to create a gallery and insert it in the page. You may need to adjust the size of the thumbnails to suit your theme in the settings. Options are under Settings > PhotoSwipe The PhotoSwipe Masonry gallery plugin allows you to: Upload multiple images at once Easily order images via drag and drop Add a title and caption Via the options panel you can modify: Thumbnail size Full image size Some other features include: Keyboard control Supports multiple galleries Block editor support with a “PhotoSwipe Masonry Gallery” block, plus a Masonry option for the standard Gallery block Simple columns and spacing controls How to add a masonry gallery (block editor) Edit a post or page and click the + (Add block) button. Search for “masonry” or “photoswipe” and choose PhotoSwipe Masonry Gallery. You can also type /masonry in an empty paragraph. Click Upload or Media Library and choose your images. Drag images in the gallery to reorder them. With the gallery selected, open the block settings sidebar (the gear icon, top right) and find the PhotoSwipe Masonry panel. Set Columns (1-8) and Spacing (0-60px). Save or update the page. Visitors can click any image to open it in the PhotoSwipe lightbox. Turn an existing Gallery block into a masonry gallery Select the Gallery block. If a single image is selected, click the “Select parent” arrow in the toolbar to select the whole gallery. In the block settings sidebar, open the PhotoSwipe Masonry panel. Turn on Masonry layout, then set Columns and Spacing. You can also select a Gallery block, click its icon in the toolbar and transform it into a PhotoSwipe Masonry Gallery. To go back to a standard gallery, turn Masonry layout off. Shortcode galleries (classic editor) Create a gallery with the Add Media button, or add a shortcode such as [gallery ids="1,2,3" columns="3"]. Existing shortcode galleries keep working as before and use the thumbnail settings under Settings > PhotoSwipe. Good to know Masonry galleries show two columns on screens narrower than 650px. Masonry galleries always open images in the PhotoSwipe lightbox, so the Gallery “Link to” setting is ignored. Images must come from the Media Library. A gallery that contains an image inserted from a URL shows as a standard Gallery. Image captions are shown under thumbnails when “Show captions on thumbnails?” is enabled under Settings > PhotoSwipe. Captions always appear in the lightbox. See a demo here

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C