WP-Safety

Fluid Security & Risk Analysis

wordpress.org/plugins/fluid

WordPress Integration for Fluid.us mircopayment Fluid is a new revenue partner for publishers. Capture revenues beyond advertising and traditional pay …

10 active installs v1.0.0 PHP 5.6+ WP 4.4+ Updated Aug 7, 2018
accept-paymentsmicro-paymentsmicropaymentspaymentspaywall
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Fluid Safe to Use in 2026?

Generally Safe

Score 85/100

Fluid has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The "fluid" plugin version 1.0.0 exhibits a strong security posture based on the provided static analysis. All identified entry points, specifically one shortcode, are correctly protected with nonce and capability checks, indicating good development practices regarding authorization and integrity. The code also demonstrates adherence to secure coding standards by utilizing prepared statements for all SQL queries and properly escaping all output, which are critical defenses against SQL injection and cross-site scripting vulnerabilities. Furthermore, the absence of dangerous functions, file operations, external HTTP requests, and bundled libraries further minimizes the potential attack surface.

Vulnerabilities
None known

Fluid Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Fluid Release Timeline

v1.0.0Current
Code Analysis
Analyzed Mar 17, 2026

Fluid Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
49 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped49 total outputs
Attack Surface

Fluid Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[fluid_button] includes\class-content-control.php:26
WordPress Hooks 27
actionplugins_loadedclass-fluid.php:60
actionplugins_loadedclass-fluid.php:64
actionload-post.phpincludes\admin\class-metaboxes.php:25
actionload-post-new.phpincludes\admin\class-metaboxes.php:26
actionadmin_enqueue_scriptsincludes\admin\class-metaboxes.php:27
actionadd_meta_boxesincludes\admin\class-metaboxes.php:37
actionsave_postincludes\admin\class-metaboxes.php:38
actionadmin_menuincludes\admin\class-settings-page.php:44
actionadmin_initincludes\admin\class-settings-page.php:45
actionadmin_enqueue_scriptsincludes\admin\class-settings-page.php:46
filterthe_contentincludes\class-content-control.php:25
actionwp_enqueue_scriptsincludes\class-content-control.php:28
actionwp_print_footer_scriptsincludes\class-content-control.php:29
actioninitincludes\class-endpoint.php:22
actioninitincludes\class-endpoint.php:23
actionquery_varsincludes\class-endpoint.php:24
actionparse_requestincludes\class-endpoint.php:25
actionparse_requestincludes\class-endpoint.php:26
filterfluid_adincludes\class-endpoint.php:89
filterfluid_extraincludes\class-endpoint.php:92
filterfluid_extra_idincludes\class-endpoint.php:93
actionwp_headincludes\class-json.php:25
filterfluid_js_is_accessible_json_blockincludes\class-json.php:28
filtersetup_get_html_with_buttonincludes\theme-support\class-styles.php:20
actionwp_footerincludes\theme-support\class-styles.php:22
filterfluid_token_request_before_buttonincludes\theme-support\class-styles.php:38
filterfluid_token_request_after_buttonincludes\theme-support\class-styles.php:39
Maintenance & Trust

Fluid Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedAug 7, 2018
PHP min version5.6
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Alternatives

Fluid Alternatives

Exodox

Exodox

exodox

A
100

With Exodox you can earn money from your web content, by locking access to selected posts and pages, which readers can unlock with a one-off payment.

70 No CVEs
Lightning Publisher for WordPress

Lightning Publisher for WordPress

lightning-publisher

A
85

Lightning Publisher for WordPress allows you to offer previews of your blog posts and require a Lightning Network payment to release the rest.

10 No CVEs
Transact

Transact

transact

A
85

Micropayments from $0.01. Receive payments for digital content on WordPress.

10 No CVEs
Uhmi

Uhmi

uhmi

A
85

Monetize your content by selling your articles, videos, music, podcasts and any other type of content for any price you want.

10 No CVEs
Acta — Pay Per Article

Acta — Pay Per Article

acta-pay-per-article

A
100

A pay-per-post solution for WordPress publishers. Give casual visitors a simple way to pay for content, no subscription required.

0 No CVEs
Developer Profile

Fluid Developer Profile

Paul Bearne

6 plugins · 5K total installs

85
trust score
Avg Security Score
87/100
Avg Patch Time
22 days
View full developer profile
Detection Fingerprints

How We Detect Fluid

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/fluid/assets/css/settings.css

HTML / DOM Fingerprints

CSS Classes
fluid-wrap
HTML Comments
<!-- Fluid.js Override -->
Data Attributes
name="fluid_nonce"id="fluid_type_override"
FAQ

Frequently Asked Questions about Fluid