Flaming Password Reset
Limited data: Flaming Password Reset has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
Based on 3 of 5 areas
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 30 |
| Support | No data |
| Reputation | No data |
Active signals
Open issues right now, with links to the source.
- CriticalSEC-2Vulnerability published 29 Dec 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.12 Jan 2026Evidence
- CriticalMNT-1No release in 112 months (last release 15 Aug 2017). Plan a replacement if the plugin is important to your site.15 Aug 2018Evidence
- WarningMNT-2Tested up to WordPress 4.8.34, 23 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
History: 1 past vulnerability, 1 still unpatched in the current version. Patched issues are listed in the Security record, not here.
Quick answers
- Is Flaming Password Reset still maintained?
- No. Last release 15 Aug 2017, over 9 years ago. 15 Aug 2017 · wordpress.org
- Who owns Flaming Password Reset, and has it changed hands?
- No change recorded. 4 Nov 2026 · SVN log
- Was Flaming Password Reset removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Flaming Password Reset safe?
- No. 1 known vulnerability has no fix in the current version. 29 Dec 2025 · Wordfence Intelligence
- Is the latest Flaming Password Reset update safe to install?
- Not enough data. No release date on record for the current version. Release history
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
No ownership changes recorded since 2015.
Maintenance
- Last release
- 9 years ago
- Releases, 24 months
- 0
- Tested up to
- 4.8 vs 7.1
- Requires PHP
- not stated supported 8.2+
Last release 15 Aug 2017. Tested up to 4.8, 23 major versions behind WordPress 7.1. Release history builds as we see new versions.
Support
- Resolved, last 2 months
- n/a
- Threads, last 2 months
- 0
Trend appears after 8 weekly snapshots.
Security record
1 vulnerability in 24 months, 1 with no fix in the current version.
| Date | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 29 Dec 2025 | Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 1.0.3 | No fix | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Reputation
Last 90 days: no reviews. Lifetime: 5.0.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 5.0 |
| 5 star | 2 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
- Active installs
- 50+
Trend appears after 8 weekly snapshots.
Facts
- Version
- 1.0.3
- Author
- jcaruso001
- Added
- 25 Jul 2015
- Last updated
- 15 Aug 2017
- Active installs
- 50+
- Requires WordPress
- 3.0.1
- Tested up to
- 4.8.34
- Requires PHP
- not stated
- Category
- not stated
- Tags
- user, admin, users
Other plugins by this author: Flaming Browser Support
Questions about Flaming Password Reset
Is Flaming Password Reset still maintained?
No. Last release 15 Aug 2017, over 9 years ago.
Who owns Flaming Password Reset, and has it changed hands?
No change recorded.
Was Flaming Password Reset removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Flaming Password Reset safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest Flaming Password Reset update safe to install?
Not enough data. No release date on record for the current version.