MaxGalleria
Healthy: vulnerability published 1 Oct 2026, fixed in 6.5.4.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 6.5.4. Update to version 6.5.4 or later.1 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| AlanP57 | 21 Jan 2015 to 24 Sep 2026, 289 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 41 days ago
- Releases, 24 months
- 8
- Tested up to
- 7.1 current
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 3 |
| Q3 2024 | 1 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 1 |
| Q4 2025 | 2 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 2 |
| Q4 2026 | 0 |
Last release 24 Sep 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 1 Oct 2026 | MaxGalleria <= 6.5.3 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 6.5.3 | 6.5.4 | 0 |
| 18 Jun 2024 | MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode | 6.4 | <= 6.4.4 | 6.4.5 | 0 |
| 19 Apr 2024 | MaxGalleria <= 6.4.2 - Missing Authorization | 4.3 | <= 6.4.2 | 6.4.3 | 0 |
| 22 Feb 2022 | MaxGalleria <= 6.2.5 - Stored Cross-Site Scripting | 4.8 | < 6.2.7 | 6.2.7 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.4 from 65 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 47 |
|---|---|
| 4 star | 10 |
| 3 star | 0 |
| 2 star | 2 |
| 1 star | 6 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 30 |
|---|---|
| 11 May 2026 | 65 |
| 18 May 2026 | 775 |
| 25 May 2026 | 169 |
| 1 Jun 2026 | 95 |
| 8 Jun 2026 | 98 |
| 15 Jun 2026 | 69 |
| 22 Jun 2026 | 55 |
| 29 Jun 2026 | 67 |
| 6 Jul 2026 | 76 |
| 13 Jul 2026 | 815 |
| 20 Jul 2026 | 166 |
| 27 Jul 2026 | 123 |
| 3 Aug 2026 | 108 |
| 10 Aug 2026 | 98 |
| 17 Aug 2026 | 106 |
| 24 Aug 2026 | 90 |
| 31 Aug 2026 | 85 |
| 7 Sep 2026 | 111 |
| 14 Sep 2026 | 95 |
| 21 Sep 2026 | 671 |
| 28 Sep 2026 | 302 |
| 5 Oct 2026 | 228 |
| 12 Oct 2026 | 148 |
| 19 Oct 2026 | 213 |
| 26 Oct 2026 | 194 |
| 2 Nov 2026 | 32 |
Weekly downloads over the last 4 weeks are 22% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 6.5.4 |
|---|---|
| Author | maxfoundry |
| Added | 1 May 2014 |
| Last updated | 24 Sep 2026 |
| Active installs | 1,000+ |
| Requires WordPress | 3.9 |
| Tested up to | 7.1.4 |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | slick slider, Gallery Plugin, best responsive gallery |
Other plugins by this author: MaxButtons - Create buttons, WP-Paginate, Media Library Folders, Social Share Buttons
Questions
Is MaxGalleria still maintained?
MaxGalleria was last updated on 24 Sep 2026. Its Canary status is Healthy.
Is MaxGalleria safe?
MaxGalleria has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.
Who owns MaxGalleria?
The wordpress.org author is maxfoundry. Recent committers: AlanP57, johnbhartley, arcware, plugin-master. We have recorded no ownership change.
What can I use instead of MaxGalleria?
Plugins in the same category with a higher Canary Score: MetaSlider Gallery - Image Gallery, Lightbox Galleries, Video Galleries, Gallery Custom Links, Catch Gallery, Photoswipe Masonry, iPanorama 360 - Advanced Virtual Tour Builder.