Spotlight Social Photo Feed
Healthy: Spotlight Social Photo Feed is maintained, has no open risk signals and no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 70 |
| Reputation | 85 |
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 23 Jun 2020 to 23 Jun 2020, 1 commits |
|---|---|
| markzahra | 23 Jun 2020 to 23 Jun 2020, 3 commits |
| Mekku | 23 Jun 2020 to 17 Jul 2024, 243 commits |
| omidakhavan | 26 Aug 2024 to 21 Oct 2026, 41 commits |
4 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 14 days ago
- Releases, 24 months
- 10
- Tested up to
- 7.1 current
- Requires PHP
- 7.1 supported 8.2+
| Q1 2024 | 4 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 0 |
| Q4 2024 | 3 |
| Q1 2025 | 2 |
| Q2 2025 | 0 |
| Q3 2025 | 1 |
| Q4 2025 | 1 |
| Q1 2026 | 1 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 2 |
Last release 21 Oct 2026. Tested with WordPress 7.1 (current).
Support
67% of 3 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 30 Apr 2026 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | 6.1 | <= 1.7.0 | 1.7.1 | 0 |
| 14 Feb 2025 | Spotlight Social Media Feeds <= 1.7.1 - Unauthenticated Sensitive Information Disclosure | 5.3 | <= 1.7.1 | 1.7.2 | 0 |
| 10 Apr 2024 | Spotlight Social Media Feeds <= 1.6.10 - Cross-Site Request Forgery | 4.3 | <= 1.6.10 | 1.6.11 | 0 |
| 18 Jul 2023 | Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get | 6.1 | 0.2 to 1.6 | 1.6.1 | 0 |
| 23 Jan 2023 | Spotlight Social Feeds <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.4.2 | 1.4.3 | 0 |
| 4 Mar 2022 | Freemius SDK <= 2.4.2 - Missing Authorization Checks | 6.3 | < 0.10.2 | 0.10.2 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q4 2023 | 3.0 |
|---|---|
| Q1 2024 | 5.0 |
| Q2 2024 | 5.0 |
| Q3 2024 | 5.0 |
| Q4 2024 | 3.0 |
| Q1 2025 | 5.0 |
| Q2 2025 | 2.0 |
| Q3 2025 | 5.0 |
| Q4 2025 | 2.5 |
| Q1 2026 | 5.0 |
| Q3 2026 | 5.0 |
Average rating rose from 3.0 to 5.0 between Q4 2023 and Q3 2026.
| 5 star | 157 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 3 |
| 1 star | 10 |
- Extension with ads on your website ! · 1 star · 21 Nov 2025
- Looks and works good, but disappointing support, accessibility & translation · 2 stars · 10 May 2025
- Can’t connect with my instagram business account while other plugin can. · 1 star · 17 Nov 2024
Momentum
50,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 868 |
|---|---|
| 11 May 2026 | 1,753 |
| 18 May 2026 | 1,695 |
| 25 May 2026 | 1,859 |
| 1 Jun 2026 | 1,500 |
| 8 Jun 2026 | 1,501 |
| 15 Jun 2026 | 1,417 |
| 22 Jun 2026 | 1,402 |
| 29 Jun 2026 | 1,292 |
| 6 Jul 2026 | 1,273 |
| 13 Jul 2026 | 1,244 |
| 20 Jul 2026 | 1,446 |
| 27 Jul 2026 | 1,494 |
| 3 Aug 2026 | 1,324 |
| 10 Aug 2026 | 1,231 |
| 17 Aug 2026 | 1,266 |
| 24 Aug 2026 | 1,468 |
| 31 Aug 2026 | 1,332 |
| 7 Sep 2026 | 1,255 |
| 14 Sep 2026 | 1,265 |
| 21 Sep 2026 | 1,302 |
| 28 Sep 2026 | 1,333 |
| 5 Oct 2026 | 21,964 |
| 12 Oct 2026 | 5,144 |
| 19 Oct 2026 | 24,544 |
| 26 Oct 2026 | 8,299 |
| 2 Nov 2026 | 684 |
Weekly downloads over the last 4 weeks are 186% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.8.1 |
|---|---|
| Author | RebelCode |
| Added | 23 Jun 2020 |
| Last updated | 21 Oct 2026 |
| Active installs | 50,000+ |
| Requires WordPress | 6.3 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.1 |
| Category | E-commerce & Shopping |
| Tags | Instagram, instagram feed, instagram block, Instagram embed, Instagram widget |
Other plugins by this author: WP RSS Aggregator - RSS Import, Feed to Post, Autoblogging, AI Content, Vireo Analytics - Cookieless WordPress Stats & Google Analytics Alternative
Questions
Is Spotlight Social Photo Feed still maintained?
Spotlight Social Photo Feed was last updated on 21 Oct 2026. Its Canary status is Healthy.
Is Spotlight Social Photo Feed safe?
Spotlight Social Photo Feed has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Spotlight Social Photo Feed?
The wordpress.org author is RebelCode. Recent committers: omidakhavan, Mekku, markzahra, plugin-master. We have recorded no ownership change.
What can I use instead of Spotlight Social Photo Feed?
Plugins in the same category with a higher Canary Score: Feed Them Social - Social Media Feeds, Video, and Photo Galleries, WPZOOM Social Feed Widget & Block.