Fluent Forms Block Security & Risk Analysis

wordpress.org/plugins/fluentform-block

Fluent forms block is the extension of Fluent forms plugin. You can build advanced Contact form by Fluent form block.

2K active installs v2.0.4 PHP 7.4+ WP 5.5+ Updated Jul 17, 2024
contact-formcustom-formform-builderformsgutenberg-form
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Fluent Forms Block Safe to Use in 2026?

Generally Safe

Score 92/100

Fluent Forms Block has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The fluentform-block plugin v2.0.4 exhibits a generally good security posture based on this static analysis. The plugin has a very small attack surface, consisting of a single AJAX handler, and importantly, this handler appears to be protected by authentication checks. The code also demonstrates strong practices in the use of prepared statements for SQL queries, with 67% of queries utilizing them, and a high rate of output escaping at 86%. Furthermore, there are no recorded vulnerabilities (CVEs) or any history of past issues, suggesting a proactive approach to security by the developers. The absence of taint analysis findings and dangerous functions further reinforces this positive assessment.

Key Concerns

  • SQL queries not using prepared statements
  • Output not properly escaped
  • Capability checks are missing
Vulnerabilities
None known

Fluent Forms Block Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Fluent Forms Block Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
2 prepared
Unescaped Output
1
6 escaped
Nonce Checks
2
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

67% prepared3 total queries

Output Escaping

86% escaped7 total outputs
Attack Surface

Fluent Forms Block Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_ffblock_fluentformapp\Ctrl\BlockCtrl.php:19
WordPress Hooks 9
actionenqueue_block_editor_assetsapp\Ctrl\AssetCtrl.php:17
filterblock_categories_allapp\Ctrl\BlockCtrl.php:17
actioninitapp\Ctrl\BlockCtrl.php:18
actionffb_render_blockapp\Ctrl\FontLoader.php:21
actionwp_headapp\Ctrl\FontLoader.php:22
actionadmin_enqueue_scriptsapp\Ctrl\FontLoader.php:23
filterrender_blockapp\Ctrl\StyleGenerator.php:16
actioninitapp\FFBlock.php:27
actionplugins_loadedapp\FFBlock.php:28
Maintenance & Trust

Fluent Forms Block Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5
Last updatedJul 17, 2024
PHP min version7.4
Downloads15K

Community Trust

Rating100/100
Number of ratings2
Active installs2K
Developer Profile

Fluent Forms Block Developer Profile

wpmetablock

1 plugin · 2K total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Fluent Forms Block

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/fluentform-block/app/css/fluentform-block-editor.css/wp-content/plugins/fluentform-block/build/index.css
Script Paths
/wp-content/plugins/fluentform-block/build/index.js/wp-content/plugins/fluentform-block/app/js/fluentform-block-editor.js
Version Parameters
fluentform-block/style.css?ver=fluentform-block/script.js?ver=

HTML / DOM Fingerprints

CSS Classes
ffblock-wrapperffblock-frontend
Data Attributes
data-ffblock-id
JS Globals
ffbBlockParams
FAQ

Frequently Asked Questions about Fluent Forms Block