Skip to content
PluginCanary

Photo Gallery by 10Web

Photo Gallery by 10Web - Mobile-Friendly Image Gallery
by 10Web · 100,000+ active installs · Checked 4 Nov 2026
Watch1 Warning

Watch: tested up to WordPress 6.6.11, 5 major versions behind 7.1.4.

75/ 100 Canary Score
Sub-scores for Photo Gallery by 10Web
Ownership100
Maintenance90
Security60
Support31
Reputation85

How the score works

Quick answers

Is Photo Gallery by 10Web still maintained?
Yes. Last release 15 Oct 2026, 15 releases in the last 24 months. 15 Oct 2026 · wordpress.org
Who owns Photo Gallery by 10Web, and has it changed hands?
Changed. New committer smbat10web made a first commit on 11 Sep 2026. 11 Sep 2026 · SVN log
Was Photo Gallery by 10Web removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Photo Gallery by 10Web safe?
72 known vulnerabilities, all fixed (latest in 1.8.43). Not on the exploited list. 14 Oct 2026 · Wordfence Intelligence
Is the latest Photo Gallery by 10Web update safe to install?
Caution. Ownership change before 1.8.48: new committer smbat10web made a first commit on 11 Sep 2026. No one-star spike after it. 15 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.6.11, 5 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
webdorado30 Jan 2014 to 28 Dec 2020, 569 commits
10web11 May 2019 to 8 Sep 2026, 265 commits
smbat10web11 Sep 2026 to 15 Oct 2026, 6 commits

New committer smbat10web made a first commit on 11 Sep 2026.

Maintenance

Last release
20 days ago
Releases, 24 months
15
Tested up to
6.6 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Photo Gallery by 10Web
Q1 20243
Q2 20244
Q3 20243
Q4 20242
Q1 20253
Q2 20250
Q3 20250
Q4 20250
Q1 20263
Q2 20263
Q3 20265
Q4 20261

Last release 15 Oct 2026. Tested up to 6.6, 5 major versions behind WordPress 7.1.

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.5.

Average rating per quarter for Photo Gallery by 10Web
Q4 20244.3
Q1 20252.6
Q2 20254.7
Q3 20254.2
Q4 20255.0
Q1 20263.3
Q3 20265.0

Average rating rose from 4.3 to 5.0 between Q4 2024 and Q3 2026.

Rating distribution
5 star1288
4 star110
3 star37
2 star24
1 star122
Latest low reviews

Security record

18 vulnerabilities in 24 months (72 on record), all patched (latest fixed in 1.8.43).

Show 72 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
14 Oct 2026Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter6.1<= 1.8.421.8.43Patched before disclosure
7 Oct 2026Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.47 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.8.471.8.488
2 Oct 2026Photo Gallery by 10Web <= 1.8.46 - Reflected Cross-Site Scripting via 'thumb_url' Parameter6.1<= 1.8.461.8.47Patched before disclosure
30 Sep 2026Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.46 - Authenticated (Contributor+) PHP Object Injection7.5<= 1.8.461.8.47Patched before disclosure
17 Sep 2026Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute6.5<= 1.8.441.8.45Patched before disclosure
16 Sep 2026Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4<= 1.8.441.8.45Patched before disclosure
3 Sep 2026Photo Gallery by 10Web – Mobile-Friendly Image Gallery < 1.8.44 - Reflected Cross-Site Scripting6.1< 1.8.441.8.44Patched before disclosure
5 Jun 2026Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter6.5<= 1.8.411.8.42Patched before disclosure
4 Jun 2026Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.41 - Authenticated (Contributor+) SQL Injection6.5<= 1.8.411.8.42Patched before disclosure
27 May 2026Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute6.5<= 1.8.401.8.41Patched before disclosure
8 Feb 2026Photo Gallery by 10Web <= 1.8.37 - Cross-Site Request Forgery4.3<= 1.8.371.8.384
21 Jan 2026Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion5.3<= 1.8.361.8.37Patched before disclosure
25 Dec 2025Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.38 - Authenticated (Editor+) Stored Cross-Site Scripting4.4<= 1.8.381.8.3969
11 Apr 2025Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter6.1<= 1.8.341.8.35Patched before disclosure
10 Mar 2025Photo Gallery by 10Web <= 1.8.33 - Unauthenticated Stored Cross-Site Scripting6.1<= 1.8.331.8.34Patched before disclosure
2 Mar 2025Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.32 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.8.321.8.33Patched before disclosure
14 Nov 2024Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.30 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.8.301.8.31Patched before disclosure
4 Nov 2024Photo Gallery by 10Web <= 1.8.30 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.8.301.8.31Patched before disclosure
3 Oct 2024Photo Gallery by 10Web <= 1.8.28 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.8.281.8.29Patched before disclosure
23 Sep 2024Photo Gallery by 10Web <= 1.8.27 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.8.271.8.28Patched before disclosure
6 Jun 2024Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function6.8<= 1.8.231.8.24Patched before disclosure
6 Jun 2024Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Zipped SVG6.4<= 1.8.231.8.24Patched before disclosure
27 May 2024Photo Gallery by 10Web <= 1.8.25 - Missing Authorization to Notice Dismissal4.3<= 1.8.251.8.2629
25 Apr 2024Photo Gallery by 10Web <= 1.8.20 - Missing Authorization5.3<= 1.8.201.8.21Patched before disclosure
5 Apr 2024Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Authenticated (Admin+) Stored Cross-Site Scripting via SVG5.5<= 1.8.211.8.22Patched before disclosure

Changelog mentions of security fixes: 1.8.43 (security); 1.8.44 (security); 1.8.45 (security); 1.8.47 (XSS); 1.8.48 (XSS).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

31% of 29 support threads resolved in the last 2 months.

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Photo Gallery by 10Web
4 May 20264,701
11 May 202666,202
18 May 202615,041
25 May 202666,124
1 Jun 202614,979
8 Jun 20268,210
15 Jun 20266,389
22 Jun 20265,427
29 Jun 20265,158
6 Jul 20267,554
13 Jul 20264,778
20 Jul 20265,086
27 Jul 20264,659
3 Aug 202659,082
10 Aug 202616,105
17 Aug 20267,872
24 Aug 202666,308
31 Aug 202612,497
7 Sep 2026116,607
14 Sep 202617,240
21 Sep 20269,839
28 Sep 202667,364
5 Oct 202613,545
12 Oct 202664,422
19 Oct 202615,893
26 Oct 202612,605
2 Nov 20261,206

Weekly downloads over the last 4 weeks are 9% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Image Hover Effects Ultimate ( ImageScore 92 · 10,000+MetaSlider GalleryScore 92 · 10,000+Gallery Custom LinksScore 91 · 30,000+Catch GalleryScore 91 · 10,000+Simple LightboxScore 90 · 100,000+

Facts

Version1.8.48
Author10Web
Added30 Jan 2014
Last updated15 Oct 2026
Active installs100,000+
Requires WordPress4.6
Tested up to6.6.11
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsgallery, image gallery, photo gallery, responsive gallery, wordpress gallery plugin

Other plugins by this author: 10Web Booster - Website speed optimization, Cache & Page Speed optimizer, Form Maker by 10Web - Mobile-Friendly Drag & Drop Contact Form Builder, 10WebSocial, Slider by 10Web - Responsive Image Slider, Image Optimizer by 10web - Image Optimizer and Compression plugin, Z, Import to Photo Gallery from NextGen gallery

Questions

Is Photo Gallery by 10Web still maintained?

Yes. Last release 15 Oct 2026, 15 releases in the last 24 months.

Who owns Photo Gallery by 10Web, and has it changed hands?

Changed. New committer smbat10web made a first commit on 11 Sep 2026.

Was Photo Gallery by 10Web removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Photo Gallery by 10Web safe?

72 known vulnerabilities, all fixed (latest in 1.8.43). Not on the exploited list.

Is the latest Photo Gallery by 10Web update safe to install?

Caution. Ownership change before 1.8.48: new committer smbat10web made a first commit on 11 Sep 2026. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue