Image Slider
Avoid: vulnerability published 5 Oct 2026 still has no fix after 14 days.
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 35 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is Image Slider still maintained?
- Yes. Last release 17 Sep 2026, 1 release in the last 24 months. 17 Sep 2026 · wordpress.org
- Who owns Image Slider, and has it changed hands?
- No change recorded. Main committer GhozyLab since Nov 2014. 3 Nov 2026 · SVN log
- Was Image Slider removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Image Slider safe?
- No. 1 known vulnerability has no fix in the current version. 5 Oct 2026 · Wordfence Intelligence
- Is the latest Image Slider update safe to install?
- No ownership change before 1.1.130. No one-star spike after it. 17 Sep 2026 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 5 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.19 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| GhozyLab | 26 Nov 2014 to 17 Sep 2026, 384 commits |
|---|
1 committer recorded. No ownership change since 2014.
Maintenance
- Last release
- 48 days ago
- Releases, 24 months
- 1
- Tested up to
- 7.1 current
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 17 Sep 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 3.4.
| 5 star | 15 |
|---|---|
| 4 star | 2 |
| 3 star | 3 |
| 2 star | 3 |
| 1 star | 8 |
Security record
1 vulnerability in 24 months (7 on record), 1 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Oct 2026 | Image Slider <= 1.1.130 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.1.130 | No fix | n/a |
Show 6 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 22 Apr 2024 | Image Slider <= 1.1.125 - Authenticated (Editor+) Stored Cross-Site Scripting | 4.4 | <= 1.1.125 | 1.1.127 | 178 |
| 24 May 2022 | Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication | 5.4 | <= 1.1.121 | 1.1.123 | 442 |
| 24 May 2022 | Image Slider <= 1.1.119 - Subscriber+ SQL Injection | 8.8 | <= 1.1.119 | 1.1.121 | Patched before disclosure |
| 28 Jan 2018 | Image Slider <= 1.1.95 - SQL Injection | 9.8 | <= 1.1.95 | 1.1.97 | Patched before disclosure |
| 23 Dec 2016 | Image Slider < 1.1.90 - Arbitrary File Deletion | 8.1 | < 1.1.90 | 1.1.90 | 16 |
| 1 Aug 2014 | PrettyPhoto Library (Multiple Plugins and Themes) <= 3.1.4 - DOM Cross-Site Scripting | 6.1 | < 1.1.7 | 1.1.7 | 294 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
4,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 51 |
|---|---|
| 11 May 2026 | 98 |
| 18 May 2026 | 87 |
| 25 May 2026 | 94 |
| 1 Jun 2026 | 83 |
| 8 Jun 2026 | 95 |
| 15 Jun 2026 | 97 |
| 22 Jun 2026 | 81 |
| 29 Jun 2026 | 63 |
| 6 Jul 2026 | 84 |
| 13 Jul 2026 | 116 |
| 20 Jul 2026 | 89 |
| 27 Jul 2026 | 107 |
| 3 Aug 2026 | 110 |
| 10 Aug 2026 | 106 |
| 17 Aug 2026 | 100 |
| 24 Aug 2026 | 87 |
| 31 Aug 2026 | 1,568 |
| 7 Sep 2026 | 347 |
| 14 Sep 2026 | 1,717 |
| 21 Sep 2026 | 391 |
| 28 Sep 2026 | 408 |
| 5 Oct 2026 | 307 |
| 12 Oct 2026 | 257 |
| 19 Oct 2026 | 403 |
| 26 Oct 2026 | 321 |
| 2 Nov 2026 | 71 |
Weekly downloads over the last 4 weeks are 3% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 1.1.130 |
|---|---|
| Author | GhozyLab |
| Added | 26 Nov 2014 |
| Last updated | 17 Sep 2026 |
| Active installs | 4,000+ |
| Requires WordPress | 3.5 |
| Tested up to | 7.1.4 |
| Requires PHP | not stated |
| Category | Design & Themes |
| Tags | slider, carousel, slideshow, image slider, Photo Slider |
Other plugins by this author: Gallery Lightbox, Gallery - Photo Albums Plugin, Contact Form Plugin, Web Icons, Image Carousel, Gallery for Social Photo, Easy Notify Lite, WP Composer - The Easiest Page Builder, Luvre - WordPress Media Library Folders
Questions
Is Image Slider still maintained?
Yes. Last release 17 Sep 2026, 1 release in the last 24 months.
Who owns Image Slider, and has it changed hands?
No change recorded. Main committer GhozyLab since Nov 2014.
Was Image Slider removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Image Slider safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest Image Slider update safe to install?
No ownership change before 1.1.130. No one-star spike after it.