CodeFlavors floating menu Security & Risk Analysis

wordpress.org/plugins/codeflavors-floating-menu

Create animated navigation menus on the left or right side of any WordPress blog.

300 active installs v1.1.5 PHP + WP 3.4+ Updated Dec 9, 2016
animationdrop-down-menufloating-menumenuwordpress-menu
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is CodeFlavors floating menu Safe to Use in 2026?

Generally Safe

Score 85/100

CodeFlavors floating menu has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The static analysis of 'codeflavors-floating-menu' v1.1.5 reveals a generally strong security posture in several key areas. The absence of known CVEs and a lack of recorded vulnerabilities in its history suggest a well-maintained and secure plugin. The code also demonstrates good practices by employing prepared statements for all SQL queries and including a nonce check. Furthermore, the plugin has a minimal attack surface with no detected AJAX handlers, REST API routes, shortcodes, or cron events, and no file operations or external HTTP requests were identified.

Key Concerns

  • Unsanitized path in taint flow
  • Only 33% of output properly escaped
  • Missing capability checks on entry points
Vulnerabilities
None known

CodeFlavors floating menu Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

CodeFlavors floating menu Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
2 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

33% escaped6 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

2 flows1 with unsanitized paths
cfm_admin_page (floating_menu.php:47)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

CodeFlavors floating menu Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 9
actioninitfloating_menu.php:32
actionadmin_menufloating_menu.php:37
actioninitfloating_menu.php:159
actionwp_footerfloating_menu.php:168
filterwp_nav_menu_argsfloating_menu.php:178
filterwp_nav_menu_objectsfloating_menu.php:247
filternav_menu_item_idfloating_menu.php:271
actionwp_print_stylesfloating_menu.php:292
actionwp_print_scriptsfloating_menu.php:307
Maintenance & Trust

CodeFlavors floating menu Maintenance & Trust

Maintenance Signals

WordPress version tested4.7.32
Last updatedDec 9, 2016
PHP min version
Downloads35K

Community Trust

Rating94/100
Number of ratings13
Active installs300
Developer Profile

CodeFlavors floating menu Developer Profile

Constantin Boiangiu

3 plugins · 3K total installs

71
trust score
Avg Security Score
89/100
Avg Patch Time
102 days
View full developer profile
Detection Fingerprints

How We Detect CodeFlavors floating menu

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/codeflavors-floating-menu/css/admin.css

HTML / DOM Fingerprints

CSS Classes
cfn_menu_floating_menu_containeranimatedrightstatic-menu
Data Attributes
data-animationdata-positiondata-top_distance
JS Globals
CFM_MENU_PARAMS
FAQ

Frequently Asked Questions about CodeFlavors floating menu