Flowbox Security & Risk Analysis
wordpress.org/plugins/flowboxFlowbox helps brands leverage and distribute social content throughout the buyer journey to increase engagement, social proof and sales.
Is Flowbox Safe to Use in 2026?
Mostly Safe
Score 78/100Flowbox is generally safe to use. 1 past CVE were resolved.
The Flowbox plugin v1.1.5 exhibits a generally good security posture with strong adherence to core WordPress security practices. The static analysis reveals a small attack surface with no unprotected entry points, a low number of SQL queries, and a high percentage of properly escaped outputs. The presence of nonce and capability checks further indicates an effort to secure the plugin's functionality. However, a significant concern arises from the taint analysis which identified one flow with unsanitized paths, despite no critical or high severity issues being flagged in this area. The plugin's vulnerability history is a major red flag, with one unpatched medium severity CVE from 2025-12-31, identified as a 'Missing Authorization' issue. This suggests a recurring pattern of authorization-related weaknesses, even if the latest static analysis appears to have addressed them or the vulnerability occurred in a future context not reflected in the current code scan. The combination of the unsanitized path flow and the known unpatched vulnerability necessitates caution.
Key Concerns
- Unpatched CVE (medium severity)
- Flow with unsanitized paths
Flowbox Security Vulnerabilities
CVEs by Year
Severity Breakdown
1 total CVE
Flowbox <= 1.1.5 - Missing Authorization
Flowbox Release Timeline
Flowbox Code Analysis
SQL Query Safety
Output Escaping
Data Flow Analysis
Flowbox Attack Surface
Shortcodes 1
WordPress Hooks 9
Maintenance & Trust
Flowbox Maintenance & Trust
Maintenance Signals
Community Trust
Flowbox Alternatives
SocialProofus Notifications
socialproofus
Boost Your Online Presence with SocialProofus Notifications: Drive Engagement and Credibility! - 100% free!
Social Proof Booster
social-proof-booster
Short Description: Social Proof Booster helps you display engaging social proof popups on your WooCommerce website
Social Proof Generator
social-proof-generator
A simple plugin to display social proof pop-ups on your WordPress site.
Product Filter for WooCommerce by WBW
woo-product-filter
Filter products by categories, attributes, prices, and more. Elementor Compatibility. Shoppers easily find products with WooCommerce Product Filter
WP ULike – Like & Dislike Buttons for Engagement and Feedback
wp-ulike
Voting buttons that let your visitors give instant feedback. See what your audience loves with no registration, no friction, just one click.
Flowbox Developer Profile
1 plugin · 10 total installs
How We Detect Flowbox
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/flowbox/css/bootstrap-5.1.3-dist/css/bootstrap.min.css/wp-content/plugins/flowbox/css/custom.css/wp-content/plugins/flowbox/css/bootstrap-5.1.3-dist/js/bootstrap.bundle.min.js/wp-content/plugins/flowbox/js/flowbox.js../css/bootstrap-5.1.3-dist/js/bootstrap.bundle.min.js../js/flowbox.jsflowbox/custom.css?ver=flowbox/flowbox.js?ver=HTML / DOM Fingerprints
<!-- wp:html --><!-- /wp:html -->id="js-flowbox-flow"window.flowbox<div id="js-flowbox-flow"></div>
<script>
window.flowbox('init', {
container: '#js-flowbox-flow',
key: '',
locale: '