Does Fluid have any unpatched vulnerabilities?

No. All known vulnerabilities in Fluid have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Fluid compatible with WordPress 4.9.29?

According to WordPress.org data, Fluid 1.0.0 has been tested up to WordPress 4.9.29. Check the plugin's changelog for the latest compatibility information.

Is Fluid compatible with PHP 5.6+?

Fluid requires PHP 5.6 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Fluid updated?

Fluid was last updated on Aug 7, 2018. Frequent updates are generally a positive security signal.

What is Fluid's security score?

Fluid has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Fluid Security & Risk Analysis

wordpress.org/plugins/fluid

WordPress Integration for Fluid.us mircopayment Fluid is a new revenue partner for publishers. Capture revenues beyond advertising and traditional pay …

10 active installs v1.0.0 PHP 5.6+ WP 4.4+ Updated Aug 7, 2018

accept-paymentsmicro-paymentsmicropaymentspaymentspaywall

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Fluid Safe to Use in 2026?

Generally Safe

Score 85/100

Fluid has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago

Risk Assessment

The "fluid" plugin version 1.0.0 exhibits a strong security posture based on the provided static analysis. All identified entry points, specifically one shortcode, are correctly protected with nonce and capability checks, indicating good development practices regarding authorization and integrity. The code also demonstrates adherence to secure coding standards by utilizing prepared statements for all SQL queries and properly escaping all output, which are critical defenses against SQL injection and cross-site scripting vulnerabilities. Furthermore, the absence of dangerous functions, file operations, external HTTP requests, and bundled libraries further minimizes the potential attack surface.

Vulnerabilities

None known

Fluid Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Fluid Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

49 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

100% escaped49 total outputs

Attack Surface

Fluid Attack Surface

Entry Points1

Unprotected0

Shortcodes 1

[fluid_button] includes\class-content-control.php:26

WordPress Hooks 27

actionplugins_loadedclass-fluid.php:60

actionplugins_loadedclass-fluid.php:64

actionload-post.phpincludes\admin\class-metaboxes.php:25

actionload-post-new.phpincludes\admin\class-metaboxes.php:26

actionadmin_enqueue_scriptsincludes\admin\class-metaboxes.php:27

actionadd_meta_boxesincludes\admin\class-metaboxes.php:37

actionsave_postincludes\admin\class-metaboxes.php:38

actionadmin_menuincludes\admin\class-settings-page.php:44

actionadmin_initincludes\admin\class-settings-page.php:45

actionadmin_enqueue_scriptsincludes\admin\class-settings-page.php:46

filterthe_contentincludes\class-content-control.php:25

actionwp_enqueue_scriptsincludes\class-content-control.php:28

actionwp_print_footer_scriptsincludes\class-content-control.php:29

actioninitincludes\class-endpoint.php:22

actioninitincludes\class-endpoint.php:23

actionquery_varsincludes\class-endpoint.php:24

actionparse_requestincludes\class-endpoint.php:25

actionparse_requestincludes\class-endpoint.php:26

filterfluid_adincludes\class-endpoint.php:89

filterfluid_extraincludes\class-endpoint.php:92

filterfluid_extra_idincludes\class-endpoint.php:93

actionwp_headincludes\class-json.php:25

filterfluid_js_is_accessible_json_blockincludes\class-json.php:28

filtersetup_get_html_with_buttonincludes\theme-support\class-styles.php:20

actionwp_footerincludes\theme-support\class-styles.php:22

filterfluid_token_request_before_buttonincludes\theme-support\class-styles.php:38

filterfluid_token_request_after_buttonincludes\theme-support\class-styles.php:39

Maintenance & Trust

Fluid Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29

Last updatedAug 7, 2018

PHP min version5.6

Downloads1K

Community Trust

Rating0/100

Number of ratings0

Active installs10

Alternatives

Fluid Alternatives

Exodox

exodox

100

With Exodox you can earn money from your web content, by locking access to selected posts and pages, which readers can unlock with a one-off payment.

60 No CVEs

Lightning Publisher for WordPress

lightning-publisher

Lightning Publisher for WordPress allows you to offer previews of your blog posts and require a Lightning Network payment to release the rest.

10 No CVEs

Transact

transact

100

Micropayments from $0.01. Receive payments for digital content on WordPress.

10 No CVEs

Micropayments Paywall

micropayments-paywall

Paywall your posts with a micropayments paywall.

0 No CVEs

PREMIUUM Content Monetization

premiuum-content-monetization

Revenue-per-Link™ content monetization. PREMIUUM makes it easy to sell articles, music, videos, files & links via subscriptions and/or micropayments.

0 No CVEs

Developer Profile

Fluid Developer Profile

Paul Bearne

6 plugins · 5K total installs

trust score

Avg Security Score

95/100

Avg Patch Time

22 days

View full developer profile

Detection Fingerprints

How We Detect Fluid

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/fluid/assets/css/settings.css

HTML / DOM Fingerprints

CSS Classes

fluid-wrap

HTML Comments

Data Attributes

name="fluid_nonce"id="fluid_type_override"

FAQ