WP Manifestindependent plugin directory
manifest / media / photoswipe-masonry-v2

PhotoSwipe Masonry 2.0 WP Registry grade D+. High-severity findings · 2 findingsWP RegistryHigh-severity findings · 2 findingsOpen the reportD+

PhotoSwipe Masonry takes advantage of the built in gallery features of WordPress. The gallery is built using PhotoSwipe from Dmitry Semenov.

★ 23stars
svn-push3latest · 9 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/thriveweb/photoswipe-masonry-v2/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Developers: Dean Oakley | Vincent Weltje | Alex Frith | Eric Jinks | Samantha Scott Tags: photoswipe, gallery, image gallery, website gallery, photoalbum, photogallery, photo, plugin, images, slideshow, short code, responsive, native gallery Requires at least: 3.0 Tested up to: 4.9.6 Stable tag: 2.0

PhotoSwipe Masonry 2.0 takes advantage of the built in gallery features of WordPress. The gallery is built using PhotoSwipe from Dmitry Semenov.

Description

PhotoSwipe Masonry 2.0 is an image gallery plugin for WordPress built using PhotoSwipe from Dmitry Semenov. (http://photoswipe.com/ "PhotoSwipe") PhotoSwipe Masonry 2.0 is an extension of our previous release, and takes advantage of the built in gallery features of WordPress. Simply use the WordPress admin to create a gallery and insert it in the page. You may need to adjust the size of the thumbnails to suit your theme in the settings.

Options are under Settings > PhotoSwipe 2.0

The PhotoSwipe Masonry 2.0 gallery plugin allows you to:

  • Upload multiple images at once
  • Easily order images via drag and drop
  • Add a title and caption

Via the options panel you can modify:

  • Thumbnail size
  • Full image size

Some other features include:

  • Keyboard control
  • Supports multiple galleries

Filter: Removes menu page for non admins ( thanks to lucspe ) add_filter( 'photoswipe_menu_capability', 'photoswipe_menu_custom_cap' ); function photoswipe_menu_custom_cap() { return 'manage_options'; }

See a demo here: (http://thriveweb.com.au/the-lab/photoswipe-v2 "PhotoSwipe Masonry 2.0")

Want to contribute? See the GitHub repo (https://github.com/thriveweb/photoswipe-masonry-v2 "github.com/thriveweb/photoswipe-masonry-v2")

Installation

  1. Upload /photoswipe-masonry-v2/ to the /wp-content/plugins/ directory
  2. Activate the plugin through the 'Plugins' menu in WordPress
  3. Upload some photos to the post or page where you want the gallery
  4. Use WordPress to create a gallery and insert it in the page

Screenshots

  1. Screenshot Default gallery layout
  2. Screenshot Popup layout

Changelog

2.0

  • Better code structure
  • Fixed lazy loading bugs
  • Added option to resize thumbnails after changing image dimensions
  • Added a nice and clean backend view

Releases

10 releases.

Tag
Published
svn-push3 latest
Jan 11, 2017 9 years ago
Jan 11, 2017 9 years ago
Jan 10, 2017 9 years ago
Jan 10, 2017 9 years ago
Oct 24, 2016 10 years ago
Aug 17, 2016 10 years ago
Jun 22, 2016 10 years ago
Jun 9, 2016 10 years ago
May 28, 2016 10 years ago
May 26, 2016 10 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

D+ grade

Security

PhotoSwipe Masonry 2.0 1.2.6 · audited by WP Registry

High-severity findings.

2 high
Audited release
1.2.6
Findings
2
Worst severity
high
Content hash
9a7ff982c45e7a558555638b…

Findings

  • high CSRF on PhotoSwipe settings save

    csrf

    The same update() handler has no nonce verification, so a cross-site POST from a logged-in admin/editor session can silently change gallery options (and inject the stored XSS payload above).

    photoswipe-masonry.php:66-100

    Recommendation

    Add wp_nonce_field to the settings form and verify with check_admin_referer before updating options.

  • high CSRF on PhotoSwipe settings save

    csrf

    The same admin_menu save path accepts POST without a nonce. An attacker page can forge photoswipe_save against a logged-in user (including Subscriber) to poison photoswipe_options and achieve the stored XSS above.

    photoswipe-masonry.php:64-100

    Recommendation

    Add wp_nonce_field to the settings form and check_admin_referer in update() before writing options.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.