Social Feed Gallery
Avoid: vulnerability published 22 Oct 2026 with no patched version yet.
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 30 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is Social Feed Gallery still maintained?
- Yes. Last release 21 Oct 2026, 51 releases in the last 24 months. 21 Oct 2026 · wordpress.org
- Who owns Social Feed Gallery, and has it changed hands?
- No change recorded. Main committer quadlayers since Apr 2019. 4 Nov 2026 · SVN log
- Was Social Feed Gallery removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Social Feed Gallery safe?
- No. 1 known vulnerability has no fix in the current version. 22 Oct 2026 · Wordfence Intelligence
- Is the latest Social Feed Gallery update safe to install?
- No ownership change before 5.0.13. No one-star spike after it. 21 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-1Vulnerability published 22 Oct 2026 with no patched version yet. Disable or replace the plugin until a fix is released.22 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| buntisoft | 23 Dec 2016 to 27 Apr 2019, 51 commits |
|---|---|
| quadlayers | 27 Apr 2019 to 21 Oct 2026, 374 commits |
| beluserra | 11 Aug 2020 to 11 Aug 2020, 1 commits |
3 committers recorded. No ownership change since 2016.
Maintenance
- Last release
- 14 days ago
- Releases, 24 months
- 51
- Tested up to
- 7.1 current
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 8 |
|---|---|
| Q2 2024 | 4 |
| Q3 2024 | 13 |
| Q4 2024 | 3 |
| Q1 2025 | 4 |
| Q2 2025 | 12 |
| Q3 2025 | 12 |
| Q4 2025 | 9 |
| Q1 2026 | 3 |
| Q2 2026 | 3 |
| Q3 2026 | 2 |
| Q4 2026 | 4 |
Last release 21 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 4.5.
| Q1 2025 | 5.0 |
|---|---|
| Q2 2025 | 3.7 |
| Q3 2025 | 5.0 |
| Q4 2025 | 5.0 |
| Q1 2026 | 3.5 |
| Q2 2026 | 5.0 |
| Q3 2026 | 5.0 |
Average rating stayed at 5.0 between Q1 2025 and Q3 2026.
| 5 star | 250 |
|---|---|
| 4 star | 11 |
| 3 star | 8 |
| 2 star | 4 |
| 1 star | 30 |
- Does not work · 1 star · 11 Feb 2026
- Not working and can not be deactivated · 1 star · 30 Jan 2026
- Not Supported · 1 star · 20 Jan 2026
Security record
2 vulnerabilities in 24 months (4 on record), 1 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 22 Oct 2026 | Social Feed Gallery <= 5.0.13 - Missing Authorization | 5.3 | <= 5.0.13 | No fix | n/a |
Show 3 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 24 Oct 2025 | Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure | 5.3 | <= 4.9.2 | 4.9.3 | Patched before disclosure |
| 1 Aug 2024 | WP Social Feed Gallery <= 4.3.9 - Missing Authorization | 5.3 | <= 4.3.9 | 4.4.0 | Patched before disclosure |
| 12 Aug 2019 | Social Feed Gallery <= 2.4.7 - Cross-Site Request Forgery | 8.8 | < 2.4.8 | 2.4.8 | 310 |
Changelog mentions of security fixes: 5.0.7 (sanitize).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
50% of 4 support threads resolved in the last 2 months.
Momentum
80,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 1,051 |
|---|---|
| 11 May 2026 | 3,262 |
| 18 May 2026 | 33,453 |
| 25 May 2026 | 35,650 |
| 1 Jun 2026 | 6,143 |
| 8 Jun 2026 | 4,185 |
| 15 Jun 2026 | 3,385 |
| 22 Jun 2026 | 2,890 |
| 29 Jun 2026 | 2,727 |
| 6 Jul 2026 | 5,408 |
| 13 Jul 2026 | 2,328 |
| 20 Jul 2026 | 2,472 |
| 27 Jul 2026 | 2,227 |
| 3 Aug 2026 | 1,991 |
| 10 Aug 2026 | 1,914 |
| 17 Aug 2026 | 1,996 |
| 24 Aug 2026 | 33,073 |
| 31 Aug 2026 | 5,789 |
| 7 Sep 2026 | 3,746 |
| 14 Sep 2026 | 5,505 |
| 21 Sep 2026 | 4,175 |
| 28 Sep 2026 | 30,624 |
| 5 Oct 2026 | 36,482 |
| 12 Oct 2026 | 4,706 |
| 19 Oct 2026 | 58,455 |
| 26 Oct 2026 | 10,391 |
| 2 Nov 2026 | 801 |
Weekly downloads over the last 4 weeks are 65% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 5.0.13 |
|---|---|
| Author | quadlayers |
| Added | 15 Dec 2016 |
| Last updated | 21 Oct 2026 |
| Active installs | 80,000+ |
| Requires WordPress | 4.7 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.6 |
| Category | E-commerce & Shopping |
| Tags | Instagram, instagram feed, Instagram widget, instagram gallery, Instagram Elementor |
Other plugins by this author: Social Chat - Click To Chat App Button, Checkout Field Manager (Checkout Manager) for WooCommerce, Direct Checkout for WooCommerce, Search Exclude, Perfect Brands for WooCommerce, Autocomplete WooCommerce Orders, WP Menu Icons, QuadMenu - Mega Menu, Ajax add to cart for WooCommerce, QuadLayers TikTok Feed, Change Storefront Footer Copyright Text, AI Copilot - ChatGPT Chatbot & AI Engine for Post Automation
Questions
Is Social Feed Gallery still maintained?
Yes. Last release 21 Oct 2026, 51 releases in the last 24 months.
Who owns Social Feed Gallery, and has it changed hands?
No change recorded. Main committer quadlayers since Apr 2019.
Was Social Feed Gallery removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Social Feed Gallery safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest Social Feed Gallery update safe to install?
No ownership change before 5.0.13. No one-star spike after it.