WP-Safety

FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses Security & Risk Analysis

wordpress.org/plugins/fluent-community

Get a fast & all-in-one community plugin. Create unlimited communities, and courses with robust social networking and LMS features.

7K active installs v2.2.07 PHP 7.3+ WP 6.0+ Updated Feb 20, 2026
communityforumlmssocial-network
93
A · Safe
CVEs total2
Unpatched0
Last CVENov 28, 2025
Plugin page Download
Safety Verdict

Is FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses Safe to Use in 2026?

Generally Safe

Score 93/100

FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses has a strong security track record. Known vulnerabilities have been patched promptly.

2 known CVEsLast CVE: Nov 28, 2025Updated 1mo ago
Risk Assessment

The 'fluent-community' plugin v2.2.07 exhibits a mixed security posture. While a high percentage of output is properly escaped and a reasonable number of capability checks are present, significant concerns arise from its attack surface and historical vulnerability patterns. The presence of six AJAX handlers, all lacking authorization checks, represents a substantial entry point for unauthenticated attacks. This, coupled with the use of dangerous functions like 'exec' and 'unserialize', points to potential for privilege escalation, remote code execution, and deserialization vulnerabilities if these handlers are not properly secured. The plugin's vulnerability history, featuring a past critical CVE related to missing authorization and deserialization, reinforces these concerns. The last known vulnerability was also recent, suggesting ongoing security challenges.

Key Concerns

  • 6 unprotected AJAX handlers
  • Dangerous functions (exec, unserialize, preg_replace(/e))
  • 21% of SQL queries not using prepared statements
  • 4 unsanitized paths in taint analysis
  • 2 known CVEs (1 critical, 1 medium)
  • Missing authorization and deserialization common vuln types
  • Bundled Lodash library (potential for outdated version issues)
Vulnerabilities
2

FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses Security Vulnerabilities

CVEs by Year

2 CVEs in 2025
2025
Patched Has unpatched

Severity Breakdown

Critical
1
Medium
1

2 total CVEs

CVE-2025-66084medium · 4.3Missing Authorization

FluentCommunity <= 2.0.0 - Missing Authorization

Nov 28, 2025 Patched in 2.1.0 (4d)
CVE-2025-39550critical · 9.8Deserialization of Untrusted Data

FluentCommunity <= 1.2.15 - Unauthenticated PHP Object Injection

Apr 17, 2025 Patched in 1.3.1 (6d)
Code Analysis
Analyzed Mar 16, 2026

FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses Code Analysis

Dangerous Functions
3
Raw SQL Queries
37
10 prepared
Unescaped Output
27
528 escaped
Nonce Checks
2
Capability Checks
12
File Operations
19
External Requests
2
Bundled Libraries
1

Dangerous Functions Found

execexec('composer dump-autoload');app\ComposerScript.php:119
unserializereturn @unserialize(trim($data), [app\Functions\Utility.php:1199
preg_replace(/e)preg_replace('/<em>(.*?)<\/eModules\Migrations\Helpers\BPMigratorHelper.php:188

Bundled Libraries

Lodash

SQL Query Safety

21% prepared47 total queries

Output Escaping

95% escaped555 total outputs
Data Flows
4 unsanitized

Data Flow Analysis

6 flows4 with unsanitized paths
viewAuthPage (Modules\Auth\AuthModdule.php:69)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
6 unprotected

FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses Attack Surface

Entry Points6
Unprotected6

AJAX Handlers 6

authwp_ajax_fluent_community_renew_nonceapp\Hooks\Handlers\ActivityMonitorHandler.php:39
noprivwp_ajax_fcom_user_registrationModules\Auth\AuthModdule.php:27
authwp_ajax_fcom_user_registrationModules\Auth\AuthModdule.php:28
noprivwp_ajax_fcom_user_login_formModules\Auth\AuthModdule.php:29
authwp_ajax_fcom_user_login_formModules\Auth\AuthModdule.php:30
authwp_ajax_fcom_user_accept_invitationModules\Auth\Classes\InvitationHandler.php:21
WordPress Hooks 152
actionfluent_community/comment_addedapp\Hooks\Handlers\ActivityMonitorHandler.php:15
actionfluent_community/feed/createdapp\Hooks\Handlers\ActivityMonitorHandler.php:16
actionfluent_community/track_activityapp\Hooks\Handlers\ActivityMonitorHandler.php:18
actionprofile_updateapp\Hooks\Handlers\ActivityMonitorHandler.php:20
actionfluent_community/feed/before_deletedapp\Hooks\Handlers\CleanupHandler.php:15
actionfluent_community/lesson/before_deletedapp\Hooks\Handlers\CleanupHandler.php:16
actionfluent_community/remove_old_notificationsapp\Hooks\Handlers\CleanupHandler.php:17
actionfluent_community/comment/media_deletedapp\Hooks\Handlers\CleanupHandler.php:19
actionfluent_community/feed/media_deletedapp\Hooks\Handlers\CleanupHandler.php:20
actionfluent_community/maybe_delete_draft_mediasapp\Hooks\Handlers\CleanupHandler.php:21
actionfluent_community/remove_medias_by_urlapp\Hooks\Handlers\CleanupHandler.php:22
actiondeleted_userapp\Hooks\Handlers\CleanupHandler.php:41
filterfluent_community/portal_data_varsapp\Hooks\Handlers\CustomizerHander.php:13
actionfluent_community/before_header_right_menu_itemsapp\Hooks\Handlers\CustomizerHander.php:15
actionfluent_community/before_portal_renderedapp\Hooks\Handlers\CustomizerHander.php:40
actionfluent_community/portal_footerapp\Hooks\Handlers\CustomizerHander.php:107
actionfluent_community/before_portal_domapp\Hooks\Handlers\CustomizerHander.php:123
actionfluent_community/space_feed/createdapp\Hooks\Handlers\EmailNotificationHandler.php:26
actionfluent_community/email_notify_new_postsapp\Hooks\Handlers\EmailNotificationHandler.php:27
actionfluent_community/comment_addedapp\Hooks\Handlers\EmailNotificationHandler.php:29
actionfluent_community/comment_added_asyncapp\Hooks\Handlers\EmailNotificationHandler.php:30
actionfluent_community/email_notify_users_everyone_tagapp\Hooks\Handlers\EmailNotificationHandler.php:35
actionfluent_community_send_daily_digestapp\Hooks\Handlers\EmailNotificationHandler.php:37
actionfluent_community/space/join_requestedapp\Hooks\Handlers\EmailNotificationHandler.php:38
actioninitapp\Hooks\Handlers\FluentBlockEditorHandler.php:15
actionfluent_community/block_editor_headapp\Hooks\Handlers\FluentBlockEditorHandler.php:40
filtershould_load_separate_core_block_assetsapp\Hooks\Handlers\FluentBlockEditorHandler.php:56
actiontemplate_redirectapp\Hooks\Handlers\FluentBlockEditorHandler.php:59
filtershould_load_separate_core_block_assetsapp\Hooks\Handlers\FluentBlockEditorHandler.php:100
actionwp_enqueue_scriptsapp\Hooks\Handlers\FluentBlockEditorHandler.php:129
actionwp_enqueue_scriptsapp\Hooks\Handlers\FluentBlockEditorHandler.php:181
filtershow_post_locked_dialogapp\Hooks\Handlers\FluentBlockEditorHandler.php:189
filteruser_can_richeditapp\Hooks\Handlers\FluentBlockEditorHandler.php:193
filterget_post_metadataapp\Hooks\Handlers\FluentBlockEditorHandler.php:197
filterjetpack_gutenbergapp\Hooks\Handlers\FluentBlockEditorHandler.php:205
filteruser_can_richeditapp\Hooks\Handlers\FluentBlockEditorHandler.php:245
actionfluent_enqueue_block_editor_assetsapp\Hooks\Handlers\FluentBlockEditorHandler.php:270
actionfluent_community/block_editor_footerapp\Hooks\Handlers\FluentBlockEditorHandler.php:352
actionfluent_block_editor/headapp\Hooks\Handlers\FluentBlockEditorHandler.php:361
actionfluent_block_editor/headapp\Hooks\Handlers\FluentBlockEditorHandler.php:362
actionfluent_block_editor/headapp\Hooks\Handlers\FluentBlockEditorHandler.php:363
actionfluent_block_editor/headapp\Hooks\Handlers\FluentBlockEditorHandler.php:364
actionfluent_block_editor/headapp\Hooks\Handlers\FluentBlockEditorHandler.php:365
actionfluent_block_editor/headapp\Hooks\Handlers\FluentBlockEditorHandler.php:366
filterscript_loader_srcapp\Hooks\Handlers\FluentBlockEditorHandler.php:431
actionwp_print_scriptsapp\Hooks\Handlers\FluentBlockEditorHandler.php:443
actionwp_print_stylesapp\Hooks\Handlers\FluentBlockEditorHandler.php:461
actionfluent_community/comment_addedapp\Hooks\Handlers\NotificationEventHandler.php:16
actionfluent_community/space_feed/createdapp\Hooks\Handlers\NotificationEventHandler.php:17
actionfluent_community/feed/react_addedapp\Hooks\Handlers\NotificationEventHandler.php:18
actionfluent_community/space/member/role_updatedapp\Hooks\Handlers\NotificationEventHandler.php:20
actionfluent_community/feed/createdapp\Hooks\Handlers\NotificationEventHandler.php:25
actioninitapp\Hooks\Handlers\PortalHandler.php:35
filterquery_varsapp\Hooks\Handlers\PortalHandler.php:43
actiontemplate_redirectapp\Hooks\Handlers\PortalHandler.php:48
actionfluent_community/portal_htmlapp\Hooks\Handlers\PortalHandler.php:66
actionfluent_community/portal_headerapp\Hooks\Handlers\PortalHandler.php:70
actionfluent_community/portal_sidebarapp\Hooks\Handlers\PortalHandler.php:74
actionfluent_community/enqueue_global_assetsapp\Hooks\Handlers\PortalHandler.php:78
actionadmin_bar_menuapp\Hooks\Handlers\PortalHandler.php:94
actionfluent_community/top_menu_right_itemsapp\Hooks\Handlers\PortalHandler.php:108
actionfluent_community/after_portal_sidebarapp\Hooks\Handlers\PortalHandler.php:110
actionfluent_community/before_header_menu_itemsapp\Hooks\Handlers\PortalHandler.php:195
actionfluent_community/portal_action_reactivate_accountapp\Hooks\Handlers\PortalHandler.php:215
filterscript_loader_tagapp\Hooks\Handlers\PortalHandler.php:868
filterfluent_community/portal_data_varsapp\Hooks\Handlers\PortalSettingsHandler.php:15
filterfluent_community/header_varsapp\Hooks\Handlers\PortalSettingsHandler.php:57
filterfluent_community/will_render_default_sidebar_itemsapp\Hooks\Handlers\PortalSettingsHandler.php:62
actionfluent_community/after_header_menuapp\Hooks\Handlers\PortalSettingsHandler.php:64
actionadmin_enqueue_scriptsapp\Hooks\Handlers\PortalSettingsHandler.php:79
actionadmin_menuapp\Hooks\Handlers\PortalSettingsHandler.php:86
filterscript_loader_tagapp\Hooks\Handlers\PortalSettingsHandler.php:178
actionfluent_community/check_rate_limit/create_postapp\Hooks\Handlers\RateLimitHandler.php:15
actionfluent_community/check_rate_limit/create_commentapp\Hooks\Handlers\RateLimitHandler.php:16
actionfluent_community/check_rate_limit/media_uploadapp\Hooks\Handlers\RateLimitHandler.php:17
actionfluent_community_scheduled_hour_jobsapp\Hooks\Handlers\Scheduler.php:15
actionfluent_community_send_daily_digest_initapp\Hooks\Handlers\Scheduler.php:20
actionfluent_community_daily_jobsapp\Hooks\Handlers\Scheduler.php:24
filterwp_handle_uploadapp\Http\Controllers\FeedsController.php:961
filterwp_handle_upload_prefilterapp\Services\Libs\FileSystem.php:104
filterupload_dirapp\Services\Libs\FileSystem.php:105
filterwp_handle_uploadapp\Services\Libs\FileSystem.php:107
filterwp_handle_uploadapp\Services\UploadHelper.php:65
filterscript_loader_tagapp\Vite.php:63
actionplugins_loadedboot\app.php:37
actioninitboot\app.php:40
actionfluent_community/portal_render_for_userboot\app.php:45
filterfluent_community/portal_noticesboot\app.php:68
actionfluent_community/portal_action_signed_urlModules\Auth\AuthModdule.php:25
actionfluent_community/portal_action_authModules\Auth\AuthModdule.php:26
filterfluent_auth/login_redirect_urlModules\Auth\AuthModdule.php:32
filterlogin_form_defaultsModules\Auth\AuthModdule.php:72
filterfluent_community/has_color_schemeModules\Auth\AuthModdule.php:77
actionwp_enqueue_scriptsModules\Auth\AuthModdule.php:182
actionfluent_community/headless/contentModules\Auth\AuthModdule.php:227
actionfluent_community/headless/head_earlyModules\Auth\AuthModdule.php:284
filterpre_get_document_titleModules\Auth\AuthModdule.php:301
filterfluent_community/auth/two_factor_enabledModules\Auth\AuthModdule.php:376
filterfluent_auth/verify_signup_emailModules\Auth\AuthModdule.php:377
actionfluent_auth/after_creating_userModules\Auth\AuthModdule.php:500
filterfluent_auth/signup_enabledModules\Auth\AuthModdule.php:504
actionfluent_community/before_auth_form_headerModules\Auth\AuthModdule.php:646
filterlogin_form_defaultsModules\Auth\AuthModdule.php:663
filterlogin_form_topModules\Auth\AuthModdule.php:669
actionfluent_community/before_auth_form_headerModules\Auth\AuthModdule.php:788
actionfluent_community/before_registration_formModules\Auth\AuthModdule.php:805
filterfluent_community/auth/invitationModules\Auth\Classes\InvitationHandler.php:14
actionfluent_community/auth/show_invitation_for_userModules\Auth\Classes\InvitationHandler.php:20
filterfluent_community/auth/after_login_with_invitationModules\Auth\Classes\InvitationHandler.php:22
filterfluent_community/auth/after_signup_redirect_urlModules\Auth\Classes\InvitationHandler.php:23
filterfluent_community/main_menu_itemsModules\Course\CourseModule.php:21
filterfluent_community/portal_page_headlessModules\FeaturesHandler.php:13
actionfluent_community/portal_headerModules\FeaturesHandler.php:17
actionfluent_community/portal_sidebarModules\FeaturesHandler.php:18
actioninitModules\FeaturesHandler.php:19
actionfluent_community/rendering_headless_portalModules\FeaturesHandler.php:21
actionfluent_community/portal_headModules\FeaturesHandler.php:26
actionfluent_community/before_js_loadedModules\FeaturesHandler.php:47
actionfluent_community/portal_footerModules\FeaturesHandler.php:58
actioninitModules\Gutenberg\EditorBlock.php:13
filterget_block_templatesModules\Gutenberg\EditorBlock.php:102
filterbody_classModules\Gutenberg\EditorBlock.php:139
actionwp_headModules\Gutenberg\EditorBlock.php:144
actionfluent_community/rendering_path_ssr_checkoutModules\Integrations\FluentCart\CartCheckout.php:17
actionfluent_cart/checkout/prepare_other_dataModules\Integrations\FluentCart\CartCheckout.php:19
actionfluent_cart/receipt/thank_you/after_header_titleModules\Integrations\FluentCart\CartCheckout.php:32
filterpre_get_document_titleModules\Integrations\FluentCart\CartCheckout.php:85
actionfluent_cart/checkout_form_openingModules\Integrations\FluentCart\CartCheckout.php:90
actionfluent_community/theme_contentModules\Integrations\FluentCart\CartCheckout.php:101
actionwp_headModules\Integrations\FluentCart\CartCheckout.php:118
filterfluent_community/portal_varsModules\Integrations\FluentCart\Paywalls.php:16
actionfluent_community/paywall_addedModules\Integrations\FluentCart\Paywalls.php:17
actionfluent_community/paywall_removedModules\Integrations\FluentCart\Paywalls.php:18
filterfluent_community/lockscreen_fieldsModules\Integrations\FluentCart\Paywalls.php:19
filterfluent_community/lockscreen_formatted_fieldModules\Integrations\FluentCart\Paywalls.php:20
filterfluentcrm_profile_sectionsModules\Integrations\FluentCRM\ProfileSection.php:18
filterfluencrm_profile_section_fluent_communityModules\Integrations\FluentCRM\ProfileSection.php:19
filterfluencrm_profile_section_save_fluent_communityModules\Integrations\FluentCRM\ProfileSection.php:20
filterfluentform/notifying_async_fluent_communityModules\Integrations\FluentForms\Bootstrap.php:36
actioninitModules\Integrations\Integrations.php:29
filterfluent_community/portal_settings_menu_itemsModules\Migrations\MigrationModule.php:20
actionfluent_community/portal_loadedModules\modules_init.php:3
filterfluent_community/portal_data_varsModules\PushNotification\PushNotificationModule.php:28
filterfluent_community/portal_varsModules\PushNotification\PushNotificationModule.php:42
filterfluent_community/general_portal_varsModules\Theming\TemplateLoader.php:12
filtertheme_page_templatesModules\Theming\TemplateLoader.php:28
filtertemplate_includeModules\Theming\TemplateLoader.php:29
actionfluent_community/theme_contentModules\Theming\TemplateLoader.php:31
actionfluent_community/theme_body_attsModules\Theming\TemplateLoader.php:34
actionfluent_community/template_footerModules\Theming\TemplateLoader.php:40
filterbody_classModules\Theming\TemplateLoader.php:139
actionwp_headModules\Theming\TemplateLoader.php:152
Maintenance & Trust

FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 20, 2026
PHP min version7.3
Downloads99K

Community Trust

Rating96/100
Number of ratings78
Active installs7K
Alternatives

FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses Alternatives

ZenCommunity — Real-Time Community Plugin with Messaging, Feeds, Live Chat & Support System

ZenCommunity — Real-Time Community Plugin with Messaging, Feeds, Live Chat & Support System

zencommunity

A
100

All-in-one WordPress community plugin: groups, posts, real-time chat, support tickets & live chat.

20 No CVEs
WPSN: Instant Social Network

WPSN: Instant Social Network

wpsn-instant-social-network

A
92

Instantly and easily turn your website into a social network! Profile, Posts, Photos, Videos, Friends, Alerts - and more!

0 No CVEs
wpForo Forum

wpForo Forum

wpforo

B
76

Number one WordPress forum plugin. Full-fledged forum solution with modern and responsive forum design. Community builder WordPress forum plugin.

20K 34 CVEs
Asgaros Forum

Asgaros Forum

asgaros-forum

B
76

Asgaros Forum is the best forum-plugin for WordPress! It comes with dozens of features in a beautiful design and stays simple and fast.

10K 12 CVEs
Discussion Board – WordPress Forum Plugin

Discussion Board – WordPress Forum Plugin

wp-discussion-board

A
96

Discussion Board is a simple, effective way to add a forum or discussion board to your site, helping you build and engage an active community.

2K 3 CVEs
Developer Profile

FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses Developer Profile

Shahjahan Jewel

17 plugins · 1.3M total installs

73
trust score
Avg Security Score
92/100
Avg Patch Time
113 days
View full developer profile
Detection Fingerprints

How We Detect FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/fluent-community/Modules/Gutenberg/editor/index.css/wp-content/plugins/fluent-community/Modules/Gutenberg/editor/content_styling.css
Version Parameters
fluent-community/Modules/Gutenberg/editor/index.css?version=fluent-community/Modules/Gutenberg/editor/content_styling.css?version=

HTML / DOM Fingerprints

HTML Comments
<!-- wp:paragraph --><!-- /wp:paragraph -->
JS Globals
wp.apiFetch.use( wp.apiFetch.createPreloadingMiddleware(
REST Endpoints
/wp-json/wp/v2/fcom-dummy//wp-json/wp/v2/fcom-lockscreen/
FAQ

Frequently Asked Questions about FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses