Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

710 searches this plugin appeared in over the last 90 days, 20 listed. 580 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 9.3 years ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

1. ★★★★★ Kazam Creative

   4mo ago

   Yet another misleading plugin that gives the impression it contains features like a Masonry style, but other gallery styles are blocked and you need to upgrade to the paid version to access these styles.

   Read on wp.org ↗
2. ★★★★★ lothar57

   4mo ago

   I am an Envira Gallery Basic user and recently contacted support with several detailed questions about the Grid layout, image sizing and custom CSS. I was fortunate to receive support from Mihai. Instead of sending generic replies or simply referring me to the documentation, he carefully read every question, explained how the Grid layout actually works, and took the time to answer several follow-up questions in great detail. His explanations were clear, technically accurate and easy to understand. Thanks to his patience and professionalism, I now fully understand the relationship between container width, columns and image size, and I was able to develop a much better strategy for my website. Excellent technical support like this has become quite rare these days. Many thanks to Mihai and the entire Envira team for providing such outstanding customer support. Highly recommended! — Lothar Wildschütz

   Read on wp.org ↗
3. ★★★★★ Georgie Greene

   5mo ago

   My issue was dealt with quickly and well. I got the correct answers I needed. Thank you so much

   Read on wp.org ↗
4. ★★★★★ johnnybanzai58

   6mo ago

   We started using it on the online newspaper where I write, and it’s brilliant for managing the process

   Read on wp.org ↗
5. ★★★★★ tgrblogger

   6mo ago

   As stated in the title, the latest update has made some changes that cause concern. First one is that the Instagram plugin reauthentication menu is missing. No way to reauth the account now. Also, when we went looking for support login, could not find any mention in the plugin anymore. Looked up old email, went to the website and trued logging in. This is a premium account, and right now no way to login and create a ticket. Been using Envira on our own and client’s websites for years with no real issues. Even when there was an issue, it was easy to contact them and the issue was quickly addressed. This is the first time we have run into this situation with them, so hoping this is just a temporary oversight. This topic was modified 2 months, 3 weeks ago by tgrblogger. Reason: clarity This topic was modified 2 months, 3 weeks ago by tgrblogger.

   Read on wp.org ↗
6. ★★★★★ askthecompgeek

   8mo ago

   This product just works and that’s exactly what I needed.

   Read on wp.org ↗
7. ★★★★★ marcno1

   8mo ago

   I enjoyed finding this app versus the one we had. Seems simpler. Thanks

   Read on wp.org ↗
8. ★★★★★ CoFOX

   10mo ago

   When your subscription expires. They basically lock you out of using the gallery properly anymore. You can’t create new galleries anymore. I have never seen a plugin just brick itself after not choose to pay. And they absolutely spam your email address with multiple messages per day. And on top of the plugin interface and design feels like it has not been updated since the 2010’s. It doesn’t feel modern at all on the frontend or backend. This is the first review I’ve given in along time.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.12.1 Added: Post type meta cap for better compatibility 1.12.1
2. — Version 1.10.2 1.10.2
3. — Version 1.10.1 1.10.0 * Added: Vertical focus layout modal * Added: Search addon upsell tab 1.9.1 * Added: Feature to convert WordPress Galleries to Envira Galleries * Fixed: Upload images on block failing in some cases 1.10.1
4. — Version 1.9.0 1.8.17 * Added: Comments Addon tab * Added: New envira gallery layout option called Creative which available in Pro * Fixed: Polaroid layout template on Gutenberg block 1.8.16 * Fixed: Improved caption sanitization * Fix 1.9.0
5. — Version 1.8.11 1.8.11
6. — Version 1.8.10 1.8.10

All 21 disclosed vulnerabilities are patched in the current version (1.16.3). Sites still on an older version should update.

1. Patched Medium · 4.3 Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More <= 1.16.1 - Missing Authorization ↗
   2026-10-09 CVE-2026-104079 Missing Authorization Affects <= 1.16.1 Patched in 1.16.2
2. Patched Medium · 4.3 Envira Gallery <= 1.16.1 - Missing Authorization ↗
   2026-10-09 CVE-2026-104682 Missing Authorization Affects <= 1.16.1 Patched in 1.16.2
3. Patched Medium · 4.3 Envira Gallery <= 1.16.1 - Authenticated (Author+) Insecure Direct Object Reference ↗
   2026-10-09 CVE-2026-104684 Authorization Bypass Through User-Controlled Key Affects <= 1.16.1 Patched in 1.16.2
4. Patched Medium · 4.3 Envira Gallery <= 1.16.1 - Authenticated (Author+) Information Exposure ↗
   2026-10-09 CVE-2026-104681 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.16.1 Patched in 1.16.2
5. Patched High · 7.2 Envira Gallery <= 1.16.1 - Authenticated (Admin+) Arbitrary Plugin Installation ↗
   2026-10-09 CVE-2026-104680 Missing Authorization Affects <= 1.16.1 Patched in 1.16.2
6. Patched Medium · 6.4 Envira Gallery <= 1.16.0 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2026-10-05 CVE-2026-104653 Improper Neutralization of Input During Web Page Generation Affects <= 1.16.0 Patched in 1.16.1
7. Patched Medium · 6.4 Envira Gallery <= 1.16.0 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2026-10-05 CVE-2026-104652 Improper Neutralization of Input During Web Page Generation Affects <= 1.16.0 Patched in 1.16.1
8. Patched Medium · 6.4 Envira Gallery <= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via Gallery Description ↗
   2026-08-27 CVE-2026-3423 Improper Neutralization of Input During Web Page Generation Affects <= 1.12.4 Patched in 1.12.5
9. Patched Medium · 5.3 Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More <= 1.12.5 - Missing Authorization ↗
   2026-06-15 CVE-2026-54190 Missing Authorization Affects <= 1.12.5 Patched in 1.12.6
10. Patched Medium · 6.4 Envira Gallery <= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via 'arrows' Parameter ↗
    2026-05-13 CVE-2026-5361 Improper Neutralization of Input During Web Page Generation Affects <= 1.12.4 Patched in 1.12.5
11. Patched Medium · 6.4 Envira Gallery for WordPress <= 1.12.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'justified_gallery_theme' Parameter via REST API ↗
    2026-03-03 CVE-2026-1236 Improper Neutralization of Input During Web Page Generation Affects <= 1.12.3 Patched in 1.12.4
12. Patched Medium · 4.3 Gallery Plugin for WordPress – Envira Photo Gallery <= 1.12.0 - Missing Authorization to Authenticated (Author+) Multiple Gallery Actions ↗
    2025-11-12 CVE-2025-12377 Missing Authorization Affects <= 1.12.0 Patched in 1.12.1
13. Patched Medium · 4.3 Gallery Plugin for WordPress – Envira Photo Gallery <= 1.11.0 - Missing Authorization to Authenticated (Contributor+) Gallery Conversion ↗
    2025-11-07 CVE-2025-11448 Missing Authorization Affects <= 1.11.0 Patched in 1.12.0
14. Patched Medium · 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library ↗
    2024-12-03 CVE-2024-5020 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.15 Patched in 1.8.16
15. Patched Medium · 4.3 Envira Photo Gallery <= 1.8.14 - Missing Authorization ↗
    2024-08-26 CVE-2024-43925 Missing Authorization Affects <= 1.8.14 Patched in 1.8.15
16. Patched Medium · 6.4 Gallery Plugin for WordPress – Envira Photo Gallery <= 1.8.14 - Authenticated (Author+) Stored Cross-Site Scripting ↗
    2024-08-20 CVE-2024-3899 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.14 Patched in 1.8.15
17. Patched Medium · 4.3 Envira Photo Gallery <= 1.8.7.3 - Cross-Site Request Forgery to Notice Dismissal ↗
    2024-06-20 CVE-2024-37095 Cross-Site Request Forgery Affects <= 1.8.7.3 Patched in 1.8.8
18. Patched Medium · 4.3 Envira Gallery Lite <= 1.8.7.2 - Missing Authorization to Gallery Modification via envira_gallery_insert_images ↗
    2024-01-08 CVE-2023-6742 Missing Authorization Affects <= 1.8.7.2 Patched in 1.8.7.3
19. Patched Medium · 6.1 Gallery Plugin for WordPress – Envira Photo Gallery <= 1.8.4.6 - Reflected Cross-Site Scripting ↗
    2022-10-10 CVE-2022-2190 Improper Neutralization of Input During Web Page Generation Affects < 1.8.4.7 Patched in 1.8.4.7
20. Patched Medium · 5.4 Envira Gallery Lite <= 1.8.3.2 - Cross-Site Scripting ↗
    2020-12-19 CVE-2021-24126 Improper Neutralization of Input During Web Page Generation Affects < 1.8.3.3 Patched in 1.8.3.3
21. Patched Medium · 6.4 Envira Photo Gallery <= 1.7.6 - Authenticated Stored Cross-Site Scripting ↗
    2020-02-25 CVE-2020-9334 Improper Neutralization of Input During Web Page Generation Affects < 1.7.7 Patched in 1.7.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 48 languages, 4 at 90% or more

Plus 24 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2017-07-01 90K+ → 100K+ up after 29 days in tier
2. 2017-06-02 70K+ → 90K+ up after 135 days in tier
3. 2017-01-18 60K+ → 70K+ up after 145 days in tier
4. 2016-08-26 50K+ → 60K+ up after 110 days in tier
5. 2016-05-08 40K+ → 50K+ up after 97 days in tier
6. 2016-02-01 30K+ → 40K+ up after 109 days in tier
7. 2015-10-15 20K+ → 30K+ up after 196 days in tier
8. 2015-04-02 10K+ → 20K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More into a readme, a review or a deck. It updates itself.

Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More: 100K+ active installs, 4.7★ (1,596 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/envira-gallery-lite