Skip to content
PluginCanary

FooGallery Photo Gallery

FooGallery Photo Gallery : Image, Video & Masonry Galleries
by FooPlugins · 100,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 19 Oct 2026, 41 releases in 24 months, no unpatched vulnerabilities.

83/ 100 Canary Score
Sub-scores for FooGallery Photo Gallery
Ownership100
Maintenance100
Security50
Support82
Reputation85

How the score works

Quick answers

Is FooGallery Photo Gallery still maintained?
Yes. Last release 19 Oct 2026, 41 releases in the last 24 months. 19 Oct 2026 · wordpress.org
Who owns FooGallery Photo Gallery, and has it changed hands?
No change recorded. Main committer bradvin since Jul 2014. 4 Nov 2026 · SVN log
Was FooGallery Photo Gallery removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is FooGallery Photo Gallery safe?
25 known vulnerabilities, all fixed (latest in 3.3.3). Not on the exploited list. 4 Sep 2026 · Wordfence Intelligence
Is the latest FooGallery Photo Gallery update safe to install?
No ownership change before 3.3.17. No one-star spike after it. 19 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
bradvin10 Jul 2014 to 3 Nov 2026, 327 commits

1 committer recorded. No ownership change since 2014.

Maintenance

Last release
16 days ago
Releases, 24 months
41
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for FooGallery Photo Gallery
Q1 20246
Q2 20244
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20256
Q4 20251
Q1 202612
Q2 20260
Q3 202618
Q4 20264

Last release 19 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (11 reviews). Lifetime: 4.8.

Average rating per quarter for FooGallery Photo Gallery
Q1 20265.0
Q2 20264.7
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q1 2026 and Q4 2026.

Rating distribution
5 star905
4 star39
3 star16
2 star9
1 star27
Latest low reviews

Security record

10 vulnerabilities in 24 months (25 on record), all patched (latest fixed in 3.3.3).

Show 25 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
4 Sep 2026Gallery : FooGallery <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute6.4<= 3.3.23.3.3Patched before disclosure
12 Jun 2026Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel <= 3.1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_attribute_key' Shortcode Parameter6.4<= 3.1.313.1.3275
30 Apr 2026Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter6.1<= 2.4.272.4.29Patched before disclosure
15 Feb 2026FooGallery <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 3.1.113.1.13193
15 Feb 2026FooGallery <= 3.1.11 - Missing Authorization4.3<= 3.1.113.1.13193
10 Feb 2026Gallery by FooGallery <= 3.1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Metadata Exposure4.3<= 3.1.93.1.1025
10 Jul 2025FooGallery - Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting6.4<= 2.4.312.4.32Patched before disclosure
7 Mar 2025FooGallery - Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates4.3<= 2.4.292.4.30365
7 Mar 2025FooGallery - Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.29 - Authenticated (Custom+) Stored Cross-Site Scripting via Album Title Size6.4<= 2.4.292.4.30365
27 Feb 2025FooGallery <= 2.4.29 - Reflected Cross-Site Scripting6.1<= 2.4.292.4.30373
13 Jun 2024FooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL6.4<= 2.4.152.4.16386
23 May 2024FooGallery (Free and Premium) < 2.4.15 - Authenticated (Author+) Stored Cross-Site Scripting6.4< 2.4.152.4.15407
5 Apr 2024FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields6.4<= 2.4.142.4.15455
5 Apr 2024FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 2.4.142.4.15455
14 Feb 2024Best WordPress Gallery Plugin - FooGallery <= 2.4.7 -Authenticated(Administrator+) Stored Cross-Site Scripting via settings4.4<= 2.4.72.4.9506
2 Jan 2024FooGallery Premium <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.4.82.4.9549
29 Sep 2023FooGallery <= 2.2.44 - Cross-Site Request Forgery4.3<= 2.2.442.3.2255
29 Sep 2023FooGallery <= 2.2.44 - Reflected Cross-Site Scripting7.2< 2.3.22.3.2255
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.11.3.29 to 2.2.412.2.44Patched before disclosure
13 Apr 2023FooGallery <= 2.2.35 - Reflected Cross-Site Scripting6.1<= 2.2.352.2.41290
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 2.1.342.1.34Patched before disclosure
31 May 2021FooGallery <= 2.0.34 - Stored Cross-Site Scripting6.4< 2.0.352.0.35531
1 Jun 2020FooGallery <= 1.8.12 - Cross-Site Scripting4.8<= 1.8.121.8.181129
4 May 2020FooGallery <= 1.9.24 - Authenticated Cross-Site Scripting8.3< 1.9.251.9.25702
25 Feb 2019Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update8.8< 1.6.171.6.17465

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

82% of 11 support threads resolved in the last 2 months.

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for FooGallery Photo Gallery
4 May 20262,934
11 May 20265,858
18 May 20269,688
25 May 202659,480
1 Jun 202613,078
8 Jun 20268,474
15 Jun 20269,180
22 Jun 20265,838
29 Jun 20265,387
6 Jul 20269,235
13 Jul 20264,805
20 Jul 20265,133
27 Jul 20264,536
3 Aug 202656,389
10 Aug 202620,993
17 Aug 20269,073
24 Aug 20268,180
31 Aug 202660,826
7 Sep 202616,950
14 Sep 202613,005
21 Sep 202670,759
28 Sep 202610,285
5 Oct 202661,180
12 Oct 202611,905
19 Oct 202667,863
26 Oct 202616,399
2 Nov 20261,525

Weekly downloads over the last 4 weeks are 16% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Catch GalleryScore 100 · 10,000+Photo Gallery by SupsysticScore 96 · 20,000+Lightbox & Modal Popup WordPress PluginScore 95 · 100,000+FancyBox for WordPressScore 95 · 30,000+Lightbox for Gallery & Image BlockScore 95 · 20,000+

Facts

Version3.3.17
AuthorFooPlugins
Added10 Jul 2014
Last updated19 Oct 2026
Active installs100,000+
Requires WordPress6.8
Tested up to7.1.4
Requires PHP7.2
CategoryE-commerce & Shopping
Tagsimage gallery, photo gallery, Gallery Plugin, masonry gallery, wordpress gallery plugin

Other plugins by this author: Lightbox & Modal Popup WordPress Plugin - FooBox, Notification Bar, Announcement and Cookie Notice WordPress Plugin - FooBar, FooGallery Migrate, FooConvert - AI Popup Builder for Flyouts, Overlays & Bars

Questions

Is FooGallery Photo Gallery still maintained?

Yes. Last release 19 Oct 2026, 41 releases in the last 24 months.

Who owns FooGallery Photo Gallery, and has it changed hands?

No change recorded. Main committer bradvin since Jul 2014.

Was FooGallery Photo Gallery removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is FooGallery Photo Gallery safe?

25 known vulnerabilities, all fixed (latest in 3.3.3). Not on the exploited list.

Is the latest FooGallery Photo Gallery update safe to install?

No ownership change before 3.3.17. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue