Skip to content
PluginCanary

Modula Image Gallery

Modula Image Gallery - Photo Grid & Video Gallery
by WP Chill · 100,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 240 releases in 24 months, no unpatched vulnerabilities.

88/ 100 Canary Score
Sub-scores for Modula Image Gallery
Ownership100
Maintenance100
Security60
Support100
Reputation85

How the score works

Quick answers

Is Modula Image Gallery still maintained?
Yes. Last release 3 Nov 2026, 240 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns Modula Image Gallery, and has it changed hands?
No change recorded. Main committer wpchill since Nov 2020. 4 Nov 2026 · SVN log
Was Modula Image Gallery removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Modula Image Gallery safe?
21 known vulnerabilities, all fixed (latest in 3.0.12). Not on the exploited list. 15 Oct 2026 · Wordfence Intelligence
Is the latest Modula Image Gallery update safe to install?
No ownership change before 3.0.17. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
machothemes5 Mar 2017 to 29 Aug 2020, 105 commits
giucu9124 Dec 2019 to 27 Feb 2024, 45 commits
wpchill5 Nov 2020 to 3 Nov 2026, 147 commits
raldea8922 Feb 2022 to 13 Jan 2025, 57 commits
cristian.raiber17 May 2023 to 22 May 2023, 14 commits
altesin20 Dec 2024 to 20 Jul 2026, 29 commits

6 committers recorded. No ownership change since 2015.

Maintenance

Last release
yesterday
Releases, 24 months
240
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for Modula Image Gallery
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 2025153
Q2 20252
Q3 202512
Q4 202510
Q1 202628
Q2 20268
Q3 202621
Q4 20266

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (4 reviews). Lifetime: 4.7.

Average rating per quarter for Modula Image Gallery
Q4 20255.0
Q1 20264.9
Q2 20263.9
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q4 2025 and Q4 2026.

Rating distribution
5 star533
4 star36
3 star15
2 star8
1 star25
Latest low reviews

Security record

17 vulnerabilities in 24 months (21 on record), all patched (latest fixed in 3.0.12).

Show 21 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026Modula Image Gallery <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Exposed 'modulaSettings' REST field on the modula-gallery CPT7.5<= 3.0.113.0.12Patched before disclosure
7 Oct 2026Modula Image Gallery - Photo Grid & Video Gallery <= 3.0.11 - Unauthenticated Information Exposure5.3<= 3.0.113.0.12Patched before disclosure
24 Sep 2026Modula Image Gallery <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure via 'modula_gallery_id' and 'modula_image_id' Parameters7.5<= 3.0.13.0.2Patched before disclosure
24 Sep 2026Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter8.1<= 3.0.23.0.3Patched before disclosure
22 Jul 2026Modula Image Gallery - Photo Grid & Video Gallery 2.14.25-2.14.30 - Authenticated (Contributor+) Stored Cross-Site Scripting6.42.14.25 to 2.14.302.14.31Patched before disclosure
26 May 2026Modula Image Gallery - Photo Grid & Video Gallery <= 2.14.23 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 2.14.232.14.24Patched before disclosure
20 Apr 2026Modula Image Gallery - Photo Grid & Video Gallery <= 2.14.18 - Authenticated (Author+) PHP Object Injection7.5<= 2.14.182.14.19Patched before disclosure
13 Feb 2026Modula Image Gallery - Photo Grid & Video Gallery <= 2.13.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post/Page Editing4.3<= 2.13.62.13.7Patched before disclosure
4 Feb 2026Modula Image Gallery <= 2.13.4 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 2.13.42.13.5Patched before disclosure
15 Dec 2025Image Gallery - Photo Grid & Video Gallery <= 2.13.3 - Missing Authorization to Authenticated (Author+) Arbitrary Gallery Modification4.3<= 2.13.32.13.4Patched before disclosure
11 Dec 2025Image Gallery - Photo Grid & Video Gallery (Modula) <= 2.13.3 - Missing Authorization to Arbitrary Directory Listing6.5<= 2.13.32.13.4Patched before disclosure
2 Dec 2025Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Upload via Race Condition7.52.13.1 to 2.13.22.13.3Patched before disclosure
2 Dec 2025Modula 2.13.1 - 2.13.2 - Authenticated (Author+) Arbitrary File Deletion7.22.13.1 to 2.13.22.13.3Patched before disclosure
22 Nov 2025Modula Image Gallery <= 2.13.6 - Missing Authorization4.3<= 2.13.62.13.766
14 Nov 2025Image Gallery - Photo Grid & Video Gallery <= 2.12.28 - Improper Authorization to Authenticated (Author+) Arbitrary Image File Move4.3<= 2.12.282.12.29Patched before disclosure
2 Apr 2025Modula Image Gallery <= 2.10.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox 5 JavaScript Library6.4<= 2.10.12.10.2Patched before disclosure
7 Jan 2025Modula Image Gallery <= 2.11.10 - Authenticated (Author+) Arbitrary File Upload8.8<= 2.11.102.11.1170
10 Sep 2023Modula <= 2.7.4 - Incomplete Authorization via 'save_image' and 'save_images'2.2< 2.7.52.7.5556
28 Oct 2022Customizable WordPress Gallery Plugin - Modula Image Gallery <= 2.6.9 - Missing Authorization to Plugin Settings Change7.5<= 2.6.92.6.91873
6 Jun 2022Modula Image Gallery <= 2.6.6 - Reflected Cross-Site Scripting6.1<= 2.6.62.6.71017
19 Feb 2020Modula Image Gallery <= 2.2.4 - Authenticated Stored Cross-Site Scripting6.4< 2.2.52.2.51855

Changelog mentions of security fixes: 2.14.31 (security); 3.0.2 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 16 support threads resolved in the last 2 months.

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Modula Image Gallery
4 May 20263,792
11 May 202647,653
18 May 202650,913
25 May 202610,096
1 Jun 20266,016
8 Jun 202640,381
15 Jun 202648,450
22 Jun 20268,386
29 Jun 20265,921
6 Jul 20267,893
13 Jul 20264,456
20 Jul 202648,552
27 Jul 2026115,408
3 Aug 202651,802
10 Aug 202645,964
17 Aug 202650,276
24 Aug 202648,284
31 Aug 202611,129
7 Sep 2026117,696
14 Sep 202689,229
21 Sep 2026129,544
28 Sep 202649,906
5 Oct 202653,562
12 Oct 202646,625
19 Oct 2026112,149
26 Oct 202615,074
2 Nov 20261,884

Weekly downloads over the last 4 weeks are 3% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Catch GalleryScore 100 · 10,000+Simple LightboxScore 98 · 100,000+Twenty20 Image Before-AfterScore 98 · 20,000+Lightbox with PhotoSwipeScore 98 · 20,000+Portfolio Filter GalleryScore 96 · 20,000+

Facts

Version3.0.17
AuthorWP Chill
Added2 Nov 2015
Last updated3 Nov 2026
Active installs100,000+
Requires WordPress5.3
Tested up to7.1.4
Requires PHP5.6
CategoryContent Management
Tagsimage gallery, video gallery, Gallery Plugin, responsive gallery, wordpress gallery plugin

Other plugins by this author: Strong Testimonials, Download Monitor, Remove Footer Credit, Image Photo Gallery Final Tiles Grid, Kali Forms - Contact Form & Drag-and-Drop Builder, Passster - Password Protect Pages and Content, Htaccess File Editor - Easily Edit, Backup, Restore .htaccess file, Gallery PhotoBlocks, CPO Content Types, RSVP and Event Management, Qyrr - simply and modern QR-Code creation, Wider Admin Menu

Questions

Is Modula Image Gallery still maintained?

Yes. Last release 3 Nov 2026, 240 releases in the last 24 months.

Who owns Modula Image Gallery, and has it changed hands?

No change recorded. Main committer wpchill since Nov 2020.

Was Modula Image Gallery removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Modula Image Gallery safe?

21 known vulnerabilities, all fixed (latest in 3.0.12). Not on the exploited list.

Is the latest Modula Image Gallery update safe to install?

No ownership change before 3.0.17. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue