PLUGIN SECURITY
Is Visual Portfolio safe?
Build photo galleries, image galleries, and portfolio grids with gallery blocks. Masonry, lightbox, sliders, and filters included.
What this plugin does
- Slug:
visual-portfolio - Author: nK
- 60000+ active installs
- 96/100 rating (336 reviews on wordpress.org)
- 2469955 all-time downloads
- On WordPress.org since 2017-09-19
galleryimage galleryphoto galleryportfoliovideo gallery
Maintenance status
- Last updated: 2026-09-10 7:57am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
Known vulnerabilities
4 known CVEs on file for Visual Portfolio. Reported between 2022 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-32537 | Gallery by Visual Portfolio [visual-portfolio] < 3.5.2 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | High 7.5 | < 3.5.2 | 3.5.2 | 2026-03-20 | — |
| — | Gallery by Visual Portfolio [visual-portfolio] < 3.3.10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 3.3.10 | 3.3.10 | 2024-12-03 | — |
| CVE-2024-4363 | Gallery by Visual Portfolio [visual-portfolio] < 3.3.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 3.3.3 | 3.3.3 | 2024-05-14 | — |
| CVE-2022-2543 | Gallery by Visual Portfolio [visual-portfolio] < 1.18.0 | Missing Authorization | Medium 6.1 | < 1.18.0 | 1.18.0 | 2022-08-15 | — |
| CVE-2022-2597 | Gallery by Visual Portfolio [visual-portfolio] < 2.19.0 | Incorrect Authorization | Medium 5.4 | < 2.19.0 | 2.19.0 | 2022-08-15 | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Smart Slider 3 — 800000+ active installs — 98/100 (1123) — max PHP <8.0
- Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider — 500000+ active installs — 92/100 (739) — max PHP 8.4
- Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery — 300000+ active installs — 86/100 (4339) — max PHP 8.4
- Firelight Lightbox — 200000+ active installs — 96/100 (359) — max PHP 8.4
- Photo Gallery by 10Web – Mobile-Friendly Image Gallery — 100000+ active installs — 90/100 (1581)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.