Skip to content
PluginCanary

Video Gallery

Video Gallery - YouTube Gallery, Playlist & Video Grid
by emarket-design · 2,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical

Avoid: vulnerability published 13 Oct 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39: a vulnerability has no patch.

Sub-scores for Video Gallery
Ownership100
Maintenance100
Security0
Support70
Reputation70

How the score works

Quick answers

Is Video Gallery still maintained?
Yes. Last release 13 Sep 2026, 13 releases in the last 24 months. 13 Sep 2026 · wordpress.org
Who owns Video Gallery, and has it changed hands?
No change recorded. Main committer emarket-design since Feb 2015. 3 Nov 2026 · SVN log
Was Video Gallery removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Video Gallery safe?
No. 1 known vulnerability has no fix in the current version. 13 Oct 2026 · Wordfence Intelligence
Is the latest Video Gallery update safe to install?
No ownership change before 4.1.0. No one-star spike after it. 13 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 13 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.27 Oct 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
emarket-design12 Feb 2015 to 13 Sep 2026, 238 commits

1 committer recorded. No ownership change since 2015.

Maintenance

Last release
52 days ago
Releases, 24 months
13
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Video Gallery
Q1 20240
Q2 20241
Q3 20240
Q4 20240
Q1 20251
Q2 20251
Q3 20252
Q4 20251
Q1 20263
Q2 20262
Q3 20263
Q4 20260

Last release 13 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.9.

Rating distribution
5 star121
4 star3
3 star1
2 star0
1 star3

Security record

7 vulnerabilities in 24 months (9 on record), 1 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
13 Oct 2026Video Gallery – YouTube Gallery, Playlist & Video Grid <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.1.0No fixn/a
Show 8 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Aug 2026Video Gallery <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment 'post_title' via emd_mb_meta Shortcode6.4<= 4.0.44.0.5Patched before disclosure
30 Jun 2026Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter7.5<= 4.0.34.0.4Patched before disclosure
15 Apr 2026Video Gallery – YouTube Gallery & Responsive Video Playlist <= 3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.5.13.5.2Patched before disclosure
23 Sep 2025Multiple Plugins by eMarket Design <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.5.03.5.1Patched before disclosure
25 Aug 2025YouTube Showcase <= 3.5.1 - Unauthenticated PHP Object Injection8.1<= 3.5.13.5.2Patched before disclosure
5 Aug 2025Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution8.1<= 3.5.23.5.347
20 May 2024YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress <= 3.3.6 - Missing Authorization to Arbitrary Post/Page Creation5.3<= 3.3.63.4.0Patched before disclosure
16 Aug 2023Video Gallery & Management <= 3.3.5 - Cross-Site Request Forgery4.3<= 3.3.53.3.6Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 2 support threads resolved in the last 2 months.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Video Gallery
4 May 202696
11 May 2026173
18 May 2026144
25 May 2026177
1 Jun 2026125
8 Jun 2026111
15 Jun 2026673
22 Jun 20261,404
29 Jun 2026931
6 Jul 2026329
13 Jul 2026178
20 Jul 2026191
27 Jul 2026185
3 Aug 2026169
10 Aug 20262,424
17 Aug 2026431
24 Aug 2026255
31 Aug 2026222
7 Sep 2026288
14 Sep 20261,434
21 Sep 2026347
28 Sep 2026266
5 Oct 2026250
12 Oct 2026272
19 Oct 2026344
26 Oct 2026267
2 Nov 202651

Weekly downloads over the last 4 weeks are 46% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Easy Video PlayerScore 91 · 20,000+Video GalleryScore 91 · 10,000+Video PopupScore 91 · 10,000+Embed Plus for YouTube GalleryScore 90 · 100,000+HTML5 Video PlayerScore 90 · 20,000+

Facts

Version4.1.0
Authoremarket-design
Added12 Feb 2015
Last updated13 Sep 2026
Active installs2,000+
Requires WordPress5.8
Tested up to7.1.4
Requires PHPnot stated
CategoryContent Management > Video & Podcast Management
Tagsyoutube, playlist, video grid, video gallery, youtube gallery

Other plugins by this author: Customer Support Ticket System & Helpdesk, Employee Spotlight - Team Member Showcase & Meet the Team Plugin, Employee Directory - Staff & Team Directory, Campus Directory - Faculty, Staff & Student Directory Plugin for WordPress, Simple Contact Form Plugin for WordPress - WP Easy Contact, Project Management, Bug and Issue Tracking Plugin - Software Issue Manager, Event RSVP and Simple Event Management Plugin, Easy Accordion FAQ and Knowledge Base Software for WordPress

Questions

Is Video Gallery still maintained?

Yes. Last release 13 Sep 2026, 13 releases in the last 24 months.

Who owns Video Gallery, and has it changed hands?

No change recorded. Main committer emarket-design since Feb 2015.

Was Video Gallery removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Video Gallery safe?

No. 1 known vulnerability has no fix in the current version.

Is the latest Video Gallery update safe to install?

No ownership change before 4.1.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue