NextGEN Download Gallery
Avoid: vulnerability published 8 Jan 2026 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 8 Jan 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.22 Jan 2026Evidence
- CriticalMNT-1No release in 32 months (last release 17 Mar 2024). Plan a replacement if the plugin is important to your site.17 Mar 2025Evidence
- WarningMNT-2Tested up to WordPress 6.5.14, 6 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| webaware | 7 Jul 2012 to 17 Mar 2024, 75 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 3 years ago
- Releases, 24 months
- 0
- Tested up to
- 6.5 vs 7.1
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 17 Mar 2024. Tested up to 6.5, 6 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 8 Jan 2026 | NextGEN Download Gallery <= 1.6.2 - Unauthenticated Information Exposure | 5.3 | <= 1.6.2 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 5.0 from 11 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 11 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
2,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 29 |
|---|---|
| 11 May 2026 | 39 |
| 18 May 2026 | 47 |
| 25 May 2026 | 48 |
| 1 Jun 2026 | 50 |
| 8 Jun 2026 | 58 |
| 15 Jun 2026 | 46 |
| 22 Jun 2026 | 48 |
| 29 Jun 2026 | 39 |
| 6 Jul 2026 | 48 |
| 13 Jul 2026 | 46 |
| 20 Jul 2026 | 50 |
| 27 Jul 2026 | 58 |
| 3 Aug 2026 | 67 |
| 10 Aug 2026 | 67 |
| 17 Aug 2026 | 72 |
| 24 Aug 2026 | 55 |
| 31 Aug 2026 | 54 |
| 7 Sep 2026 | 61 |
| 14 Sep 2026 | 74 |
| 21 Sep 2026 | 79 |
| 28 Sep 2026 | 93 |
| 5 Oct 2026 | 97 |
| 12 Oct 2026 | 83 |
| 19 Oct 2026 | 143 |
| 26 Oct 2026 | 134 |
| 2 Nov 2026 | 37 |
Weekly downloads over the last 4 weeks are 56% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.6.2 |
|---|---|
| Author | webaware |
| Added | 7 Jul 2012 |
| Last updated | 17 Mar 2024 |
| Active installs | 2,000+ |
| Requires WordPress | 4.0 |
| Tested up to | 6.5.14 |
| Requires PHP | 5.6 |
| Category | E-commerce & Shopping |
| Tags | gallery, nextgen, download |
Other plugins by this author: SSL Insecure Content Fixer, Disable Emails, Flexible Map, Log Emails, Delete Expired Transients, Easy Digital Downloads Free Link, Eway Payment Gateway, Gravity Forms Eway, Minimum Age for WooCommerce, GF Windcave Free, Inspect Gravity Forms, GlotPress Notify
Questions
Is NextGEN Download Gallery still maintained?
NextGEN Download Gallery was last updated on 17 Mar 2024. Its Canary status is Avoid.
Is NextGEN Download Gallery safe?
NextGEN Download Gallery has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns NextGEN Download Gallery?
The wordpress.org author is webaware. Recent committers: webaware, plugin-master. We have recorded no ownership change.
What can I use instead of NextGEN Download Gallery?
Plugins in the same category with a higher Canary Score: MetaSlider Gallery - Image Gallery, Lightbox Galleries, Video Galleries, Gallery Custom Links, Catch Gallery, Photoswipe Masonry, iPanorama 360 - Advanced Virtual Tour Builder.