Flow-Flow Social Streams Security & Risk Analysis

wordpress.org/plugins/flow-flow-social-streams

Display a mix of custom Facebook, Instagram, TikTok, YouTube, X (Twitter) and RSS feeds in grid gallery or widget.

8K active installs v5.0.5 PHP 5.6+ WP 5.0+ Updated Jul 20, 2026
embed-instagramfacebook-feedinstagram-feedinstagram-galleryinstagram-widget
98
A · Safe
CVEs total2
Unpatched0
Last CVEDec 11, 2025
Safety Verdict

Is Flow-Flow Social Streams Safe to Use in 2026?

Generally Safe

Score 98/100

Flow-Flow Social Streams has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

2 known CVEsLast CVE: Dec 11, 2025Updated 1mo ago
Risk Assessment
Assessment pending
Vulnerabilities
2 published

Flow-Flow Social Streams Security Vulnerabilities

CVEs by Year

1 CVE in 2018
2018
1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

Medium
2

2 total CVEs

CVE-2025-13866medium · 6.4Missing Authorization

Flow-Flow Social Feed Stream 3.0.0 - 4.7.5 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via flow_flow_social_auth AJAX action

Dec 11, 2025 Patched in 5.0.1 (211d)
WF-74a33813-ca5a-4cf4-9d36-b71ca76b8915-flow-flow-social-streamsmedium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Flow-Flow Social Feed Stream <= 3.0.71 - Cross-Site Scripting

Nov 5, 2018 Patched in 3.0.72 (1905d)
Maintenance & Trust

Flow-Flow Social Streams Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 20, 2026
PHP min version5.6
Downloads671K

Community Trust

Rating66/100
Number of ratings100
Active installs8K
Developer Profile

Flow-Flow Social Streams Developer Profile

Looks Awesome

4 plugins · 8K total installs

65
trust score
Avg Security Score
80/100
Avg Patch Time
1353 days
View full developer profile
FAQ

Frequently Asked Questions about Flow-Flow Social Streams