Blog Floating Button
Healthy: vulnerability published 13 Aug 2026, fixed in 1.4.21.
| Ownership | 100 |
|---|---|
| Maintenance | 90 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 13 Aug 2026, fixed in 1.4.21. Update to version 1.4.21 or later.13 Aug 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 13 Apr 2020 to 13 Apr 2020, 1 commits |
|---|---|
| 1meril | 14 Apr 2020 to 31 Jul 2026, 35 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 3 months ago
- Releases, 24 months
- 6
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 8.2 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 0 |
| Q4 2024 | 2 |
| Q1 2025 | 2 |
| Q2 2025 | 0 |
| Q3 2025 | 1 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 31 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 13 Aug 2026 | Blog Floating Button <= 1.4.20 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 1.4.20 | 1.4.21 | 0 |
| 24 Jul 2026 | Blog Floating Button <= 1.4.20 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 1.4.20 | Not affected | n/a |
| 3 Mar 2023 | Blog Floating Button <= 1.4.12 - Cross-Site Request Forgery | 4.3 | <= 1.4.12 | 1.4.13 | 66 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 5.0 from 1 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 1 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
8,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 63 |
|---|---|
| 11 May 2026 | 102 |
| 18 May 2026 | 89 |
| 25 May 2026 | 118 |
| 1 Jun 2026 | 115 |
| 8 Jun 2026 | 94 |
| 15 Jun 2026 | 84 |
| 22 Jun 2026 | 68 |
| 29 Jun 2026 | 73 |
| 6 Jul 2026 | 111 |
| 13 Jul 2026 | 32 |
| 20 Jul 2026 | 14 |
| 27 Jul 2026 | 2,638 |
| 3 Aug 2026 | 618 |
| 10 Aug 2026 | 340 |
| 17 Aug 2026 | 317 |
| 24 Aug 2026 | 252 |
| 31 Aug 2026 | 233 |
| 7 Sep 2026 | 217 |
| 14 Sep 2026 | 206 |
| 21 Sep 2026 | 316 |
| 28 Sep 2026 | 215 |
| 5 Oct 2026 | 218 |
| 12 Oct 2026 | 197 |
| 19 Oct 2026 | 899 |
| 26 Oct 2026 | 366 |
| 2 Nov 2026 | 47 |
Weekly downloads over the last 4 weeks are 27% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.4.21 |
|---|---|
| Author | 1meril |
| Added | 14 Apr 2020 |
| Last updated | 31 Jul 2026 |
| Active installs | 8,000+ |
| Requires WordPress | 6.0 |
| Tested up to | 7.0.8 |
| Requires PHP | 8.2 |
| Category | E-commerce & Shopping |
| Tags | banner, announcement, fixed banner, footer banner, floating banner |
Questions
Is Blog Floating Button still maintained?
Blog Floating Button was last updated on 31 Jul 2026. Its Canary status is Healthy.
Is Blog Floating Button safe?
Blog Floating Button has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Blog Floating Button?
The wordpress.org author is 1meril. Recent committers: 1meril, plugin-master. We have recorded no ownership change.
What can I use instead of Blog Floating Button?
Plugins in the same category with a higher Canary Score: Announcer - Sticky Message Banner & Notification Bar, SALERT - Social Proof Notifications & Live Sales Popup, Countix Sales Countdown Timer, Countdown Block, WPC Product Timer for WooCommerce.