Social Feed Gallery

Formerly known as "Instagram Feed", this is the best plugin for displaying Instagram feeds on WordPress. It also supports Instagram reels.

v5.0.7quadlayersUpdated 2026-05-27Added Dec 15, 201680k+ installs90% rating67% support resolved
35
Score
104
Errors
52
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance97
Maintainability51

Top Issues by Category

maintainability61
i18n54
security39
performance2

Issues Details

156 issues found in latest scan

ERROR26
WordPress.WP.I18n.TextDomainMismatch

Mismatched text domain. Expected 'insta-gallery' but got 'jetpack-assets'.

ERROR21
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERROR16
wp_function_not_compatible_with_requires_wp

Function "determine_locale()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.7.0.

WARNING13
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING11
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedVariableFound

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$account_id".

ERROR11
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$args['after_title']'.

ERROR11
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNING6
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_REQUEST['accounts']

WARNING6
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_REQUEST['accounts'] not unslashed before sanitization. Use wp_unslash() or similar

ERROR6
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to _x().

ERROR4
WordPress.WP.AlternativeFunctions.strip_tags_strip_tags

strip_tags() is discouraged. Use the more comprehensive wp_strip_all_tags() instead.

WARNING3
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING3
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

ERROR3
WordPress.Security.EscapeOutput.ExceptionNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"Version number \"$version\" is not in a recognized format."'.

WARNING2
Squiz.PHP.DiscouragedFunctions.Discouraged

The use of function ini_set() is discouraged

WARNING2
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "install_plugins_nonmenu_tabs".

ERROR2
WordPress.WP.AlternativeFunctions.rename_rename

rename() is discouraged. Use WP_Filesystem::move() to rename a file.

ERROR2
WordPress.WP.AlternativeFunctions.unlink_unlink

unlink() is discouraged. Use wp_delete_file() to delete a file.

WARNING2
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERROR2
five_star_reviews_detected

Linking directly to 5 stars reviews is not allowed.

WARNING1
PluginCheck.CodeAnalysis.DiscouragedFunctions.load_plugin_textdomainFound

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wp_is_serving_rest_request".

WARNING1
missing_composer_json_file

The "/vendor" directory using composer exists, but "composer.json" file is missing.

WARNING1
trademarked_term

The plugin slug includes a restricted term. Your plugin slug - "insta-gallery" - contains the restricted term "insta" and cannot be used to begin your plugin slug. We disallow the use of certain terms in ways that are abused, or potentially infringe on and/or are misleading with regards to trademarks. You may use the term "insta" elsewhere in your plugin slug, such as "... for insta".

Latest Snapshot

Findings

156

Errors

104

Warnings

52

Score History

First score snapshot

First scan completed Jun 20, 2026

v5.0.7 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v5.0.7

35

Latest

Findings
156
Errors
104
Warnings
52
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins