Skip to content
PluginCanary

Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery

by Syed Balkhi · 300,000+ active installs · Checked 3 Nov 2026
Healthy9 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 4.5.0.

85/ 100 Canary Score
Sub-scores for Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery
Ownership100
Maintenance100
Security60
Support94
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 4.5.0. Update to version 4.5.0 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 4.5.5. Update to version 4.5.5 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 4.5.0. Update to version 4.5.0 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 4.5.1. Update to version 4.5.1 or later.24 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 18 Sep 2026, fixed in 4.5.0. Update to version 4.5.0 or later.18 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 18 Sep 2026, fixed in 4.5.0. Update to version 4.5.0 or later.18 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 18 Sep 2026, fixed in 4.5.0. Update to version 4.5.0 or later.18 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 18 Sep 2026, fixed in 4.5.0. Update to version 4.5.0 or later.18 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 18 Sep 2026, fixed in 4.5.0. Update to version 4.5.0 or later.18 Sep 2026Evidence
  • InfoSEC-318 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
photocrati20 Apr 2012 to 8 Feb 2024, 677 commits
Imagely11 Aug 2020 to 12 Aug 2020, 5 commits
chrisakelley30 Nov 2023 to 14 Mar 2024, 5 commits
poxtron30 Mar 2024 to 1 Oct 2026, 42 commits
yagniksangani16 Sep 2026 to 29 Oct 2026, 8 commits

New committer yagniksangani made a first commit on 16 Sep 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
32
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery
Q1 20244
Q2 2024233
Q3 20242
Q4 20242
Q1 20253
Q2 20252
Q3 20250
Q4 20254
Q1 20264
Q2 20266
Q3 20267
Q4 20264

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

94% of 17 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.4.1 - Authenticated (Custom+) Remote Code Execution via XML-RPC 'meta_data' Mass Assignment and Path Traversal8.8<= 4.4.14.5.00
30 Oct 2026Photo Gallery, Sliders, Proofing and Themes <= 4.5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment `title` Attribute via Shutter Lightbox innerHTML5.4<= 4.5.44.5.50
30 Oct 2026Photo Gallery, Sliders, Proofing and Themes <= 4.4.1 - Authenticated (Custom+) Local File Inclusion via Lightroom 'gallery_edit' Task property_list + Image Upload7.5<= 4.4.14.5.00
24 Sep 2026Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.5.0 - Unauthenticated Arbitrary File Read7.5<= 4.5.04.5.10
18 Sep 2026NextGEN Gallery <= 4.4.0 - Authenticated (Admin+) Insecure Direct Object Reference2.7<= 4.4.04.5.00
18 Sep 2026NextGEN Gallery <= 4.4.0 - Authenticated (Admin+) Insecure Direct Object Reference4.3<= 4.4.04.5.00
18 Sep 2026NextGEN Gallery <= 4.4.0 - Authenticated (Admin+) Insecure Direct Object Reference2.7<= 4.4.04.5.00
18 Sep 2026NextGEN Gallery <= 4.4.0 - Authenticated (Admin+) Arbitrary File Upload7.2<= 4.4.04.5.00
18 Sep 2026NextGEN Gallery <= 4.4.0 - Authenticated (Contributor+) Insecure Direct Object Reference4.3<= 4.4.04.5.00
3 Aug 2026Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.2.3 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.2.34.2.40
20 May 2026Photo Gallery, Sliders, Proofing and Themes – NextGEN < 4.2.1 - Authenticated (Admin+) SQL Injection4.9< 4.2.14.2.10
19 May 2026Photo Gallery, Sliders, Proofing and Themes <= 4.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Image Deletion via REST API4.3<= 4.2.04.2.10
17 Mar 2026Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion8.8<= 4.0.44.0.50
17 Dec 2025Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'8.8<= 3.59.124.0.00
3 Jul 2025Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library6.4<= 3.59.113.59.120
19 May 2025Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library6.4<= 3.59.43.59.50
4 Feb 2025Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.8 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 3.59.83.59.90
3 Dec 2024Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library6.4<= 3.59.43.59.50
4 Nov 2024NextGEN Gallery <= 3.39.4 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.39.43.39.5n/a
22 Jul 2024NextGEN Gallery <= 3.59.3 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.59.33.59.40
22 Jun 2024Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Gallery4.4<= 3.59.23.59.30
26 Apr 2024Nextgen Gallery <= 3.59 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.593.59.10
5 Apr 2024WordPress Gallery Plugin – NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure5.3<= 3.593.59.10
23 Nov 2023NextGEN Gallery <= 3.37 - Cross-Site Request Forgery4.3<= 3.373.390
25 Sep 2023NextGEN Gallery <= 3.37 - Authenticated (Admininistrator+) Arbitrary File Read and Deletion in gallery_edit6.5<= 3.373.390

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery
Q3 20255.0
Q4 20254.6
Q1 20262.8
Q2 20263.7
Q3 20265.0
Q4 20263.7

Average rating fell from 5.0 to 3.7 between Q3 2025 and Q4 2026.

Rating distribution
5 star3344
4 star307
3 star80
2 star80
1 star531
Latest low reviews

Momentum

300,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery
4 May 20268,718
11 May 2026134,298
18 May 202639,086
25 May 2026145,771
1 Jun 202623,953
8 Jun 202616,256
15 Jun 202613,351
22 Jun 202612,642
29 Jun 2026135,326
6 Jul 202633,390
13 Jul 202622,430
20 Jul 202620,080
27 Jul 2026127,575
3 Aug 202644,976
10 Aug 2026155,538
17 Aug 2026257,432
24 Aug 202632,592
31 Aug 2026129,453
7 Sep 202624,892
14 Sep 2026249,209
21 Sep 202645,168
28 Sep 2026127,950
5 Oct 202642,710
12 Oct 2026125,947
19 Oct 2026144,251
26 Oct 2026157,471
2 Nov 20266,928

Weekly downloads over the last 4 weeks are 29% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

MetaSlider Gallery - Image Gallery, Lightbox Galleries, Video GalleriesScore 92 · 10,000+Gallery Custom LinksScore 91 · 30,000+Catch GalleryScore 91 · 10,000+Photoswipe MasonryScore 91 · 6,000+iPanorama 360 - Advanced Virtual Tour BuilderScore 91 · 4,000+

Facts

Version4.5.5
AuthorSyed Balkhi
Added23 Apr 2007
Last updated29 Oct 2026
Active installs300,000+
Requires WordPress5.5.4
Tested up to7.1.4
Requires PHP7.4
CategoryContent Management > Blog & Article Publishing
Tagsgallery, slideshow, image gallery, photo gallery, wordpress gallery plugin

Other plugins by this author: WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More, WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager, All in One SEO - AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights), Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & More, Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, Smash Balloon Social Photo Feed - Easy Social Feeds Plugin, One Click Demo Import, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, PDF Embedder - PDF Viewer & Embed PDF Files for WordPress, WP Crontrol, WP Mail Logging

Questions

Is Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery still maintained?

Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery safe?

Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery has no open unpatched vulnerabilities on record. 19 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery?

The wordpress.org author is Syed Balkhi. Recent committers: yagniksangani, poxtron, chrisakelley, photocrati, Imagely. New committer yagniksangani made a first commit on 16 Sep 2026.

What can I use instead of Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery?

Plugins in the same category with a higher Canary Score: MetaSlider Gallery - Image Gallery, Lightbox Galleries, Video Galleries, Gallery Custom Links, Catch Gallery, Photoswipe Masonry, iPanorama 360 - Advanced Virtual Tour Builder.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue