InPost Gallery
Watch: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 50 |
| Security | 70 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is InPost Gallery still maintained?
- Yes. Last release 6 Mar 2026, 0 releases in the last 24 months. 6 Mar 2026 · wordpress.org
- Who owns InPost Gallery, and has it changed hands?
- No change recorded. Main committer RealMag777 since Apr 2012. 3 Nov 2026 · SVN log
- Was InPost Gallery removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is InPost Gallery safe?
- 8 known vulnerabilities, all fixed (latest in 2.1.5). Not on the exploited list. 20 Apr 2026 · Wordfence Intelligence
- Is the latest InPost Gallery update safe to install?
- Not enough data. No release date on record for the current version. Release history
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| RealMag777 | 24 Apr 2012 to 6 Mar 2026, 425 commits |
|---|
1 committer recorded. No ownership change since 2012.
Maintenance
- Last release
- 8 months ago
- Releases, 24 months
- 0
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- 7.2 supported 8.2+
Last release 6 Mar 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1. Release history builds as we see new versions.
Reputation
Last 90 days: no reviews. Lifetime: 4.0.
| 5 star | 12 |
|---|---|
| 4 star | 2 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 4 |
Security record
4 vulnerabilities in 24 months (8 on record), all patched (latest fixed in 2.1.5).
Show 8 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 20 Apr 2026 | InPost Gallery <= 2.1.4.6 - Unauthenticated SQL Injection | 7.5 | <= 2.1.4.6 | 2.1.5 | n/a |
| 3 Sep 2025 | InPost Gallery <= 2.1.4.5 - Authenticated (Subscriber+) Local File Inclusion | 8.8 | <= 2.1.4.5 | 2.1.4.6 | n/a |
| 11 Apr 2025 | InPost Gallery <= 2.1.4.3 - Cross-Site Request Forgery | 4.3 | <= 2.1.4.3 | 2.1.4.4 | n/a |
| 25 Nov 2024 | InPost Gallery <= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template | 6.3 | <= 2.1.4.2 | 2.1.4.3 | n/a |
| 20 Mar 2023 | InPost Gallery <= 2.1.4.1 - Reflected Cross-Site Scripting via 'imgurl' | 6.1 | <= 2.1.4.1 | 2.1.4.2 | n/a |
| 28 Nov 2022 | InPost Gallery <= 2.1.4.1 - Local File Inclusion | 9.8 | <= 2.1.4 | 2.1.4.1 | n/a |
| 20 Oct 2016 | InPost Gallery < 2.1.2.1 - Local File Inclusion | 9.8 | < 2.1.2.1 | 2.1.2.1 | n/a |
| 18 Oct 2016 | InPost Gallery <= 2.1.2 - Cross-Site Scripting | 6.4 | < 2.1.2.1 | 2.1.2.1 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
700+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 2.1.5 |
|---|---|
| Author | RealMag777 |
| Added | 24 Apr 2012 |
| Last updated | 6 Mar 2026 |
| Active installs | 700+ |
| Requires WordPress | 3.5.0 |
| Tested up to | 6.9.11 |
| Requires PHP | 7.2 |
| Category | Content Management > Media Library & Asset Management |
| Tags | album, image, photo, gallery, photo gallery |
Other plugins by this author: HUSKY - Products Filter for WooCommerce Professional. MCP is onboard, FOX - Currency Switcher Professional for WooCommerce, BEAR - Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server), WOLF - WordPress Posts Bulk Editor and Manager Professional, Active Woot Products Tables for WooCommerce. 100% FREE , MDTF - Meta Data and Taxonomies Filter, WPCS - WordPress Currency Switcher Professional, TableOn - WordPress Posts Table Filterable , Taxonomy Chain Menu, GMap Targeting - Simple Targeting Inside Google Maps, Mealingua Posts and Pages Translations
Questions
Is InPost Gallery still maintained?
Yes. Last release 6 Mar 2026, 0 releases in the last 24 months.
Who owns InPost Gallery, and has it changed hands?
No change recorded. Main committer RealMag777 since Apr 2012.
Was InPost Gallery removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is InPost Gallery safe?
8 known vulnerabilities, all fixed (latest in 2.1.5). Not on the exploited list.
Is the latest InPost Gallery update safe to install?
Not enough data. No release date on record for the current version.