Responsive Lightbox & Gallery

The most popular lightbox plugin and responsive gallery builder for WordPress.

v2.7.8dFactoryUpdated 2026-06-19Added Jul 8, 2013100k+ installs98% rating33% support resolved
28
Score
139
Errors
513
Warnings
+0
Change

Category Scores

Security0
Repo94
Performance90
Maintainability25

Top Issues by Category

security311
maintainability233
i18n76
performance18

Issues Details

652 issues found in latest scan

WARNING157
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "attachment_fields_to_save".

WARNING108
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING84
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

ERROR50
WordPress.WP.I18n.MissingTranslatorsComment

A function call to __() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERROR38
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$checked'.

WARNING36
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_GET['page']

WARNING34
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_GET['plugin'] not unslashed before sanitization. Use wp_unslash() or similar

WARNING18
WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude

Using exclusionary parameters, like exclude, in calls to get_posts() should be done with caution, see https://wpvip.com/documentation/performance-improvements-by-removing-usage-of-post__not_in/ for more information.

ERROR16
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to __().

WARNING11
Internal.LineEndings.Mixed

File has mixed line endings; this may cause incorrect results

WARNING11
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "rl_add_lightbox".

WARNING11
WordPress.WP.EnqueuedResourceParameters.NotInFooter

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

WARNING7
WordPress.DB.SlowDBQuery.slow_db_query_tax_query

Detected usage of tax_query, possible slow query.

WARNING7
WordPress.NamingConventions.PrefixAllGlobals.DynamicHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$this->prefix . '_configuration_updated'".

WARNING6
WordPress.DB.DirectDatabaseQuery.DirectQuery

Use of a direct database call is discouraged.

WARNING6
WordPress.DB.DirectDatabaseQuery.NoCaching

Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().

WARNING6
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['gallery_id']. Check that the array index exists before using it.

ERROR6
WordPress.WP.I18n.NonSingularStringLiteralText

The $text parameter must be a single text string literal. Found: $button1

ERROR5
WordPress.DB.PreparedSQL.NotPrepared

Use placeholders and $wpdb->prepare(); found $groupby

WARNING5
WordPress.WP.EnqueuedResourceParameters.MissingVersion

Resource version not set in call to wp_enqueue_style(). This means new versions of the style may not always be loaded due to browser caching.

ERROR4
WordPress.WP.I18n.UnorderedPlaceholdersText

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'If you are having problems with this plugin, please browse it\'s %s or talk about them in the %s.'.

ERROR4
badly_named_files

File and folder names must not contain spaces or special characters.

WARNING3
WordPress.DB.SlowDBQuery.slow_db_query_meta_query

Detected usage of meta_query, possible slow query.

ERROR3
WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

ERROR2
five_star_reviews_detected

Linking directly to 5 stars reviews is not allowed.

Latest Snapshot

Findings

652

Errors

139

Warnings

513

Score History

First score snapshot

First scan completed Jun 19, 2026

v2.7.8 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 19, 2026

v2.7.8

28

Latest

Findings
652
Errors
139
Warnings
513
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins