Does Flex Fields have any unpatched vulnerabilities?

No. All known vulnerabilities in Flex Fields have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Flex Fields compatible with WordPress 6.8.5?

According to WordPress.org data, Flex Fields 2.2.4 has been tested up to WordPress 6.8.5. Check the plugin's changelog for the latest compatibility information.

Is Flex Fields compatible with PHP 7.0+?

Flex Fields requires PHP 7.0 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Flex Fields updated?

Flex Fields was last updated on Nov 11, 2025. Frequent updates are generally a positive security signal.

What is Flex Fields's security score?

Flex Fields has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Flex Fields Security & Risk Analysis

wordpress.org/plugins/flex-fields

Flex Fields is a WordPress plugin to add custom meta boxes for post types, pages, taxonomies, and more, using the flex_field() function.

10 active installs v2.2.4 PHP 7.0+ WP 6.6+ Updated Nov 11, 2025

fieldmetapostpost-typestemplate

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Flex Fields Safe to Use in 2026?

Generally Safe

Score 100/100

Flex Fields has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago

Risk Assessment

The flex-fields plugin version 2.2.5 demonstrates a strong security posture based on the provided static analysis. The absence of any recorded CVEs, coupled with the plugin's adherence to secure coding practices like 100% prepared statement usage for SQL queries and a high percentage of properly escaped output, indicates a well-maintained and security-conscious development process. The attack surface is minimal and, critically, there are no unprotected entry points identified, meaning all AJAX handlers have authentication checks. This proactive approach to security is commendable.

Key Concerns

External HTTP requests without explicit sanitization
Low number of capability checks for AJAX

Vulnerabilities

None known

Flex Fields Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Flex Fields Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

85 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

97% escaped88 total outputs

Data Flows

All sanitized

Data Flow Analysis

4 flows

flex_fields_save_options (FlexFields\FlexFields_Options.php:64)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Flex Fields Attack Surface

Entry Points2

Unprotected0

AJAX Handlers 2

authwp_ajax_flex_fields_save_optionsFlexFields\FlexFields_Options.php:15

noprivwp_ajax_flex_fields_save_optionsFlexFields\FlexFields_Options.php:16

WordPress Hooks 19

actionadmin_enqueue_scriptsflex-fields.php:35

actionadmin_enqueue_scriptsflex-fields.php:36

actionadmin_initFlexFields\FlexFields_License.php:12

actioninitFlexFields\FlexFields_Main.php:13

filtermanage_flex_fields_posts_columnsFlexFields\FlexFields_Main.php:14

actionmanage_flex_fields_posts_custom_columnFlexFields\FlexFields_Main.php:15

actionadd_meta_boxesFlexFields\FlexFields_Main.php:16

actioncurrent_screenFlexFields\FlexFields_Main.php:17

actionsave_postFlexFields\FlexFields_Main.php:18

actionadmin_menuFlexFields\FlexFields_Main.php:19

actionadmin_initFlexFields\FlexFields_Notification.php:9

actionadmin_noticesFlexFields\FlexFields_Notification.php:15

actionadmin_menuFlexFields\FlexFields_Options.php:14

actionadmin_menuFlexFields\FlexFields_Settings.php:9

actionadmin_initFlexFields\FlexFields_Settings.php:10

actioncurrent_screenFlexFields\FlexFields_Taxonomy.php:9

actionedited_termsFlexFields\FlexFields_Taxonomy.php:10

actioncreated_termFlexFields\FlexFields_Taxonomy.php:11

actionadmin_menuFlexFields\FlexFields_Usage.php:9

Maintenance & Trust

Flex Fields Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5

Last updatedNov 11, 2025

PHP min version7.0

Downloads1K

Community Trust

Rating0/100

Number of ratings0

Active installs10

Alternatives

Flex Fields Alternatives

Meta Box

meta-box

Meta Box plugin is a powerful, professional developer toolkit to create custom meta boxes and custom fields for your custom post types in WordPress.

500K 6 CVEs

JSM Show Post Metadata

jsm-show-post-meta

Show post metadata (aka custom fields) in a metabox when editing posts / pages - a great tool for debugging issues with post metadata.

10K 1 CVE

CubeWP Framework

cubewp-framework

CubeWP is an end-to-end dynamic content framework for WordPress to help you shrink time and cut cost of development up to 90%.

4K 1 unpatched

Custom post types, Custom Fields & more

custom-post-types

Custom Post Types, Custom Fields, Custom Taxonomies, Custom Templates, Custom Admin Pages, Custom Admin Notices. Directly from the WP dashboard.

3K 3 CVEs

Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver…

acf-views

Display content with full control over selection and layout. Lightweight and compatible with any theme or page builder.

2K 1 CVE

Developer Profile

Flex Fields Developer Profile

Flex Plugins

3 plugins · 40 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Flex Fields

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/flex-fields/assets/css/flex_fields_main.css/wp-content/plugins/flex-fields/assets/js/flex_fields_libs.js/wp-content/plugins/flex-fields/assets/js/flex_fields_backend.js/wp-content/plugins/flex-fields/assets/js/flex_fields_frontend.js/wp-content/plugins/flex-fields/assets/css/flex_fields_pro_main.css/wp-content/plugins/flex-fields/assets/js/flex_fields_pro_backend.js

Script Paths

/wp-content/plugins/flex-fields/assets/js/flex_fields_libs.js/wp-content/plugins/flex-fields/assets/js/flex_fields_backend.js/wp-content/plugins/flex-fields/assets/js/flex_fields_frontend.js/wp-content/plugins/flex-fields/assets/js/flex_fields_pro_backend.js

Version Parameters

flex-fields/assets/css/flex_fields_main.css?ver=flex-fields/assets/js/flex_fields_libs.js?ver=flex-fields/assets/js/flex_fields_backend.js?ver=flex-fields/assets/js/flex_fields_frontend.js?ver=flex-fields/assets/css/flex_fields_pro_main.css?ver=flex-fields/assets/js/flex_fields_pro_backend.js?ver=

HTML / DOM Fingerprints

CSS Classes

ff-tabsff-tab-itemff-tab-contentff-textareaff-inputff-form-field

HTML Comments

Data Attributes

data-tabdata-ff-repeater-adddata-ff-repeater-removedata-ff-field-iddata-ff-field-typedata-ff-field-name+9 more

JS Globals

flexFields

FAQ