Skip to content
PluginCanary

Contest Gallery - Upload & Vote Photos, Media, Sell with PayPal & Stripe

by Wasiliy Strecker / ContestGallery developer · 1,000+ active installs · Checked 3 Nov 2026
Watch6 Warnings

Watch: vulnerability published 21 Oct 2026, fixed in 34.0.1.

79/ 100 Canary Score
Sub-scores for Contest Gallery - Upload & Vote Photos, Media, Sell with PayPal & Stripe
Ownership100
Maintenance100
Security50
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 21 Oct 2026, fixed in 34.0.1. Update to version 34.0.1 or later.21 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 34.0.2. Update to version 34.0.2 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 33.0.1. Update to version 33.0.1 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Sep 2026, fixed in 33.0.0. Update to version 33.0.0 or later.15 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 19 Aug 2026, fixed in 30.0.6. Update to version 30.0.6 or later.19 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 14 Aug 2026, fixed in 31.0.0. Update to version 31.0.0 or later.14 Aug 2026Evidence
  • InfoSEC-335 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Contest-Gallery13 Aug 2015 to 1 Nov 2026, 910 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
3 days ago
Releases, 24 months
103
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter for Contest Gallery - Upload & Vote Photos, Media, Sell with PayPal & Stripe
Q1 20249
Q2 20248
Q3 202414
Q4 202419
Q1 202520
Q2 20257
Q3 20259
Q4 202510
Q1 20267
Q2 202615
Q3 202617
Q4 20267

Last release 1 Nov 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
21 Oct 2026Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe < 34.0.1 - Missing Authorization5.3< 34.0.134.0.10
19 Oct 2026Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 34.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 34.0.134.0.20
8 Oct 2026Contest Gallery <= 33.0.0 - Unauthenticated Unauthorized Account Activation5.3<= 33.0.033.0.111
15 Sep 2026Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameter8.8<= 32.0.133.0.01
19 Aug 2026Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.5 - Unauthenticated Stored Cross-Site Scripting7.2<= 30.0.530.0.653
14 Aug 2026Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'6.5<= 30.0.731.0.00
29 Jul 2026Contest Gallery <= 30.0.6 - Unauthenticated Two-Factor Authentication Bypass5.3<= 30.0.630.0.70
27 Jul 2026Contest Gallery <= 30.0.6 - Missing Authorization4.3<= 30.0.630.0.70
27 Jul 2026Contest Gallery <= 30.0.6 - Unauthenticated Stored Cross-Site Scripting7.2<= 30.0.630.0.70
23 Jul 2026Contest Gallery <= 30.0.6 - Missing Authorization4.3<= 30.0.630.0.70
26 Jun 2026Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.0 - Authenticated (Contributor+) SQL Injection6.5<= 30.0.030.0.114
16 Jun 2026Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter8.8<= 30.0.230.0.347
18 May 2026Contest Gallery <= 28.1.6 - Unauthenticated SQL Injection7.5<= 28.1.628.1.70
29 Apr 2026Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.7 - Missing Authorization5.3<= 28.1.729.0.0102
29 Apr 2026Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.7 - Authenticated (Subscriber+) Sensitive Information Exposure4.3<= 28.1.729.0.0102
29 Apr 2026Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 28.1.629.0.0102
21 Apr 2026Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.6 - Unauthenticated SQL Injection7.5<= 28.1.628.1.70
23 Mar 2026Contest Gallery <= 28.1.5 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion8.1<= 28.1.528.1.60
23 Mar 2026Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.2.2 - Missing Authorization5.3<= 28.1.2.228.1.329
10 Mar 2026Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 28.1.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery6.4<= 28.1.2.128.1.2.276
2 Mar 2026Contest Gallery <= 28.1.4 - Unauthenticated SQL Injection7.5<= 28.1.428.1.5174
9 Jan 2026Contest Gallery <= 28.1.1 - Missing Authorization4.3<= 28.1.128.1.2101
14 Nov 2025Contest Gallery <= 28.0.2 - Missing Authorization5.3<= 28.0.228.0.364
12 Oct 2025Contest Gallery <= 28.0.0 - Cross-Site Request Forgery4.3<= 28.0.028.0.155
10 Oct 2025Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injection4.3<= 27.0.328.0.052

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.4 from 89 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star73
4 star3
3 star1
2 star1
1 star11

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Contest Gallery - Upload & Vote Photos, Media, Sell with PayPal & Stripe
4 May 2026273
11 May 2026208
18 May 2026272
25 May 2026947
1 Jun 2026227
8 Jun 2026869
15 Jun 20261,650
22 Jun 2026290
29 Jun 2026227
6 Jul 20261,479
13 Jul 2026359
20 Jul 2026946
27 Jul 2026622
3 Aug 20261,085
10 Aug 20261,416
17 Aug 2026612
24 Aug 20261,620
31 Aug 20261,161
7 Sep 2026489
14 Sep 20261,294
21 Sep 2026617
28 Sep 2026466
5 Oct 20261,652
12 Oct 2026997
19 Oct 20261,329
26 Oct 20261,359
2 Nov 2026166

Weekly downloads over the last 4 weeks are 15% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

MetaSlider Gallery - Image Gallery, Lightbox Galleries, Video GalleriesScore 92 · 10,000+Gallery Custom LinksScore 91 · 30,000+Catch GalleryScore 91 · 10,000+Photoswipe MasonryScore 91 · 6,000+iPanorama 360 - Advanced Virtual Tour BuilderScore 91 · 4,000+

Facts

Version34.0.3
AuthorWasiliy Strecker / ContestGallery developer
Added13 Aug 2015
Last updated1 Nov 2026
Active installs1,000+
Requires WordPress5.6
Tested up to7.1.4
Requires PHP5.6
CategoryE-commerce & Shopping
Tagsvoting, gallery, file upload, photo contest, User Registration

Questions

Is Contest Gallery - Upload & Vote Photos, Media, Sell with PayPal & Stripe still maintained?

Contest Gallery - Upload & Vote Photos, Media, Sell with PayPal & Stripe was last updated on 1 Nov 2026. Its Canary status is Watch.

Is Contest Gallery - Upload & Vote Photos, Media, Sell with PayPal & Stripe safe?

Contest Gallery - Upload & Vote Photos, Media, Sell with PayPal & Stripe has no open unpatched vulnerabilities on record. 35 vulnerabilities were published in the last 24 months. Its Canary status is Watch.

Who owns Contest Gallery - Upload & Vote Photos, Media, Sell with PayPal & Stripe?

The wordpress.org author is Wasiliy Strecker / ContestGallery developer. Recent committers: Contest-Gallery, plugin-master. We have recorded no ownership change.

What can I use instead of Contest Gallery - Upload & Vote Photos, Media, Sell with PayPal & Stripe?

Plugins in the same category with a higher Canary Score: MetaSlider Gallery - Image Gallery, Lightbox Galleries, Video Galleries, Gallery Custom Links, Catch Gallery, Photoswipe Masonry, iPanorama 360 - Advanced Virtual Tour Builder.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue