PLUGIN SECURITY
Is Insta Gallery safe?
Formerly known as "Instagram Feed", this is the best plugin for displaying Instagram feeds on WordPress. It also supports Instagram reels.
What this plugin does
- Slug:
insta-gallery - Author: quadlayers
- 80000+ active installs
- 90/100 rating (303 reviews on wordpress.org)
- 5452816 all-time downloads
- On WordPress.org since 2016-12-15
InstagramInstagram Elementorinstagram feedinstagram galleryInstagram widget
Maintenance status
- Latest known version: 5.0.7
- Last updated: 2026-08-24 5:50pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 5.6+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
3 known CVEs on file for Insta Gallery. Reported between 2019 and 2025.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-10637 | Social Feed Gallery [insta-gallery] < 4.9.3 | Missing Authorization | Medium 5.3 | < 4.9.3 | 4.9.3 | 2025-10-24 | ✓ fixed in latest |
| CVE-2024-39640 | Social Feed Gallery [insta-gallery] < 4.4.0 | Missing Authorization | Medium 6.5 | < 4.4.0 | 4.4.0 | 2024-08-01 | ✓ fixed in latest |
| CVE-2019-15779 | Social Feed Gallery [insta-gallery] < 2.4.8 | Cross-Site Request Forgery (CSRF) | High 8.8 | < 2.4.8 | 2.4.8 | 2019-08-12 | ✓ fixed in latest |
How to fix it
Keep Insta Gallery updated — 5.0.7 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Smash Balloon Social Photo Feed – Easy Social Feeds Plugin — 1000000+ active installs — 98/100 (4350) — max PHP 8.4
- Metricool – Social media and site statistics — 80000+ active installs — 88/100 (18)
- Spotlight Social Feeds – Block, Shortcode, and Widget — 60000+ active installs — 94/100 (170) — max PHP 8.4
- WPZOOM Social Feed Widget & Block — 60000+ active installs — 86/100 (50)
- All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements — 40000+ active installs — 98/100 (541) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.