PLUGIN SECURITY
Is Flat Preloader safe?
Flat Preloader helps you create the loading page with many excited gif icons.
What this plugin does
- Slug:
flat-preloader - Author: Thien Nguyen
- 3000+ active installs
- 92/100 rating (18 reviews on wordpress.org)
- 85365 all-time downloads
- On WordPress.org since 2016-01-05
flatgificonloadingpreloader
Maintenance status
- Latest known version: 1.16.0
- Last updated: 2023-05-02 4:07pm GMT
- Tested up to WordPress: 6.2.11
- Max supported PHP (analyzed): 8.4
⚠ Flat Preloader hasn't been updated in over 1217 days. An unmaintained plugin doesn't receive new security fixes, which is itself a security risk even without a known CVE.
Known vulnerabilities
2 known CVEs on file for Flat Preloader. Reported between 2021 and 2021.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2021-24685 | Flat Preloader [flat-preloader] < 1.5.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.5.4 | 1.5.4 | 2021-09-28 | ✓ fixed in latest |
| CVE-2021-24789 | Flat Preloader [flat-preloader] < 1.5.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 1.5.5 | 1.5.5 | 2021-09-28 | ✓ fixed in latest |
How to fix it
Keep Flat Preloader updated — 1.16.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- GIF Master – Awesome GIFs with Giphy and Tenor — 3000+ active installs — 100/100 (1) — max PHP 8.4
- OpenHook — 1000+ active installs — 74/100 (6) — max PHP 8.4
- WP GIF Uploader — 1000+ active installs — 100/100 (1)
- Comment Image — 1000+ active installs — 84/100 (6) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.