Google Chrome Frame for WordPress Security & Risk Analysis

wordpress.org/plugins/google-chrome-frame

Enable Google Chrome Frame functionality by adding the tag to the of your site.

30 active installs v3.0.1 PHP + WP 2.2+ Updated Jul 20, 2013
chromeframegooglegoogle-chrome-frameinternet-explorer
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Google Chrome Frame for WordPress Safe to Use in 2026?

Generally Safe

Score 85/100

Google Chrome Frame for WordPress has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 12yr ago
Risk Assessment

The "google-chrome-frame" v3.0.1 plugin exhibits a strong security posture based on the static analysis and vulnerability history provided. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events indicates a very limited attack surface, which is a significant positive security indicator. Furthermore, the code signals show no dangerous functions, no direct SQL queries (all are prepared statements), and no file operations or external HTTP requests, all of which are excellent security practices. The lack of any recorded vulnerabilities, CVEs, or common vulnerability types further strengthens the perception of a secure plugin.

Key Concerns

  • Unescaped output found
  • No capability checks present
  • No nonce checks present
Vulnerabilities
None known

Google Chrome Frame for WordPress Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Google Chrome Frame for WordPress Release Timeline

v3.0
v2.0
v1.0
Code Analysis
Analyzed Apr 16, 2026

Google Chrome Frame for WordPress Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped4 total outputs
Attack Surface

Google Chrome Frame for WordPress Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionadmin_menugoogle-chrome-frame.php:37
filterplugin_action_linksgoogle-chrome-frame.php:43
actionwp_headgoogle-chrome-frame.php:165
actionwp_headgoogle-chrome-frame.php:169
Maintenance & Trust

Google Chrome Frame for WordPress Maintenance & Trust

Maintenance Signals

WordPress version tested3.6.1
Last updatedJul 20, 2013
PHP min version
Downloads8K

Community Trust

Rating0/100
Number of ratings0
Active installs30
Developer Profile

Google Chrome Frame for WordPress Developer Profile

Zack Katz

24 plugins · 14K total installs

83
trust score
Avg Security Score
84/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Google Chrome Frame for WordPress

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Script Paths
/wp-content/plugins/google-chrome-frame/CFInstall.min.js

HTML / DOM Fingerprints

HTML Comments
<![if IE]><![endif]>
Data Attributes
name="google-chrome-meta"id="google-chrome-meta"name="google-chrome-javascript"id="google-chrome-javascript"name="google-chrome-version[]"id="google-chrome-version-all"+8 more
JS Globals
window.CFInstall
FAQ

Frequently Asked Questions about Google Chrome Frame for WordPress