Full Page Load Security & Risk Analysis

wordpress.org/plugins/full-page-load

Smooth page loading.

20 active installs v1.0 PHP + WP 3.1+ Updated Apr 8, 2013
lazy-loadloadloadingspinspinner
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Full Page Load Safe to Use in 2026?

Generally Safe

Score 85/100

Full Page Load has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 13yr ago
Risk Assessment

The 'full-page-load' plugin v1.0 exhibits an exceptionally strong security posture based on the provided static analysis. The absence of any identified attack surface, dangerous functions, direct SQL queries, unescaped output, file operations, external HTTP requests, nonces, or capability checks is highly commendable. Furthermore, the taint analysis reveals no identified flows, indicating a clean code base regarding potential data manipulation vulnerabilities.

The plugin's vulnerability history is also pristine, with zero recorded CVEs across all severity levels. This lack of historical vulnerabilities, coupled with the robust static analysis, suggests a developer who prioritizes security best practices. However, it's important to acknowledge that a complete absence of any potential vulnerabilities can sometimes be a result of a very limited or non-existent attack surface. In this case, the plugin appears to have a negligible attack surface.

Overall, 'full-page-load' v1.0 presents a very low-risk profile. Its strengths lie in its minimal attack surface and apparent adherence to secure coding principles. The primary weakness, if one can call it that, is the lack of any observable functionality that would necessitate security checks, which in itself is a positive security feature.

Vulnerabilities
None known

Full Page Load Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Full Page Load Release Timeline

No version history available.
Code Analysis
Analyzed Mar 16, 2026

Full Page Load Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Full Page Load Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionwp_enqueue_scriptsfull-page-load.php:26
Maintenance & Trust

Full Page Load Maintenance & Trust

Maintenance Signals

WordPress version tested3.5.2
Last updatedApr 8, 2013
PHP min version
Downloads5K

Community Trust

Rating100/100
Number of ratings1
Active installs20
Developer Profile

Full Page Load Developer Profile

JohnnyPea

8 plugins · 140 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Full Page Load

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/full-page-load/spin.min.js/wp-content/plugins/full-page-load/script.js
Script Paths
/wp-content/plugins/full-page-load/spin.min.js/wp-content/plugins/full-page-load/script.js
Version Parameters
full-page-load/spin.min.js?ver=full-page-load/script.js?ver=

HTML / DOM Fingerprints

Data Attributes
data-fpl-init
JS Globals
pluginpath
FAQ

Frequently Asked Questions about Full Page Load