Skip to content
PluginCanary

PrettyPhoto

PrettyPhoto - Simple Lightbox Plugin
by Babar · 2,000+ active installs · Checked 3 Nov 2026
Watch2 Warnings

Watch: tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.

70/ 100 Canary Score
Sub-scores for PrettyPhoto
Ownership100
Maintenance20
Security95
Support70
Reputation70

How the score works

Quick answers

Is PrettyPhoto still maintained?
No. Last release 14 Sep 2025, over 1 year ago. 14 Sep 2025 · wordpress.org
Who owns PrettyPhoto, and has it changed hands?
No change recorded. Main committer Litonice13 since Jun 2020. 3 Nov 2026 · SVN log
Was PrettyPhoto removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is PrettyPhoto safe?
3 known vulnerabilities, all fixed (latest in 1.2.4). Not on the exploited list. 5 Sep 2025 · Wordfence Intelligence
Is the latest PrettyPhoto update safe to install?
No ownership change before 1.2.5. No one-star spike after it. 14 Sep 2025 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • WarningMNT-1No release in 13 months (last release 14 Sep 2025). Plan a replacement if the plugin is important to your site.14 Sep 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Litonice1320 Jun 2020 to 14 Sep 2025, 8 commits

1 committer recorded. No ownership change since 2013.

Maintenance

Last release
14 months ago
Releases, 24 months
1
Tested up to
6.8 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for PrettyPhoto
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20251
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 14 Sep 2025. Tested up to 6.8, 3 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 2.8.

Rating distribution
5 star5
4 star2
3 star0
2 star1
1 star7

Security record

1 vulnerability in 24 months (3 on record), patched (latest fixed in 1.2.4).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
5 Sep 2025prettyPhoto <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.2.4Not affectedn/a
5 Jun 2024WordPress prettyPhoto <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter6.4<= 1.2.31.2.4466
5 May 2015WordPress prettyPhoto <= 1.1 - DOM Cross-Site Scripting6.1<= 1.11.215

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for PrettyPhoto
4 May 202649
11 May 2026117
18 May 2026120
25 May 202695
1 Jun 202683
8 Jun 202690
15 Jun 202669
22 Jun 202658
29 Jun 202668
6 Jul 202653
13 Jul 202667
20 Jul 202687
27 Jul 202681
3 Aug 202696
10 Aug 202694
17 Aug 202699
24 Aug 202671
31 Aug 202682
7 Sep 2026114
14 Sep 2026103
21 Sep 2026109
28 Sep 2026106
5 Oct 202697
12 Oct 202682
19 Oct 2026144
26 Oct 2026131
2 Nov 202615

Weekly downloads over the last 4 weeks are 6% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Image Hover Effects Ultimate ( ImageScore 92 · 10,000+MetaSlider GalleryScore 92 · 10,000+Gallery Custom LinksScore 91 · 30,000+Catch GalleryScore 91 · 10,000+Simple LightboxScore 90 · 100,000+

Facts

Version1.2.5
AuthorBabar
Added26 Jan 2013
Last updated14 Sep 2025
Active installs2,000+
Requires WordPressnot stated
Tested up to6.8.12
Requires PHPnot stated
CategoryDesign & Themes > Themes & Templates
Tagsfancybox, lightbox, thickbox, PrettyPhoto, WordPress likghtbox

Other plugins by this author: MetaTag, Video Codes, Snap A Site, PagePatrol, Title AI

Questions

Is PrettyPhoto still maintained?

No. Last release 14 Sep 2025, over 1 year ago.

Who owns PrettyPhoto, and has it changed hands?

No change recorded. Main committer Litonice13 since Jun 2020.

Was PrettyPhoto removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is PrettyPhoto safe?

3 known vulnerabilities, all fixed (latest in 1.2.4). Not on the exploited list.

Is the latest PrettyPhoto update safe to install?

No ownership change before 1.2.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue