Skip to content
PluginCanary

FlatPM

by Mikhail Flat · 10,000+ active installs · Checked 4 Nov 2026
Healthy1 Warning

Healthy: released 10 months ago, no open vulnerabilities. One warning: not tested with recent WordPress versions.

80/ 100Healthy
Canary Score

Based on 3 of 5 areas

Sub-scores for FlatPM
Ownership100
Maintenance50
Security95
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

History: 3 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is FlatPM still maintained?
Yes. Last release 7 Jan 2026, 4 releases in the last 24 months. 7 Jan 2026 · wordpress.org
Who owns FlatPM, and has it changed hands?
No change recorded. Main committer flatboy since Mar 2021. 4 Nov 2026 · SVN log
Was FlatPM removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is FlatPM safe?
3 known vulnerabilities, all fixed (latest in 3.2.3). Not on the exploited list. 20 Jan 2026 · Wordfence Intelligence
Is the latest FlatPM update safe to install?
No ownership change before 3.2.3. No one-star spike after it. 7 Jan 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master5 Mar 2021 to 5 Mar 2021, 1 commits
flatboy8 Mar 2021 to 7 Jan 2026, 145 commits

2 committers recorded. No ownership changes recorded since 2021.

Maintenance

Last release
10 months ago
Releases, 24 months
4
Tested up to
6.9 vs 7.1
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for FlatPM
Q1 202410
Q2 20241
Q3 20240
Q4 20241
Q1 20252
Q2 20250
Q3 20250
Q4 20250
Q1 20261
Q2 20260
Q3 20260
Q4 20260

Last release 7 Jan 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Support

Resolved, last 2 months
n/a
Threads, last 2 months
0

Trend appears after 8 weekly snapshots.

Security record

1 vulnerability in 24 months (3 on record), patched (latest fixed in 3.2.3).

Show 3 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
20 Jan 2026Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Post Meta6.4<= 3.2.23.2.3Before disclosure
25 Mar 2024Authenticated (Contributor+) Stored Cross-Site Scripting6.4< 3.1.053.1.05Before disclosure
17 Nov 2022Reflected Cross-Site Scripting6.1<= 2.6612.662Same day

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.6.

Last 90 days vs lifetime average rating for FlatPM
Last 90 daysNo reviews
Lifetime4.6
Rating distribution
5 star8
4 star0
3 star0
2 star0
1 star1
Latest low reviews

Momentum

Active installs
10,000+
Downloads, last full week
220
Weekly downloads, last 26 complete weeks
Weekly downloads for FlatPM
4 May 202678
11 May 2026164
18 May 2026147
25 May 2026131
1 Jun 2026172
8 Jun 2026147
15 Jun 2026162
22 Jun 2026112
29 Jun 2026117
6 Jul 2026112
13 Jul 2026127
20 Jul 2026157
27 Jul 2026138
3 Aug 2026188
10 Aug 2026141
17 Aug 2026158
24 Aug 2026112
31 Aug 2026145
7 Sep 2026163
14 Sep 2026211
21 Sep 2026189
28 Sep 2026177
5 Oct 2026174
12 Oct 2026142
19 Oct 2026200
26 Oct 2026220

Weekly downloads over the last 4 weeks are 20% above the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Ads.txt ManagerScore 95 · 100,000+AI Powered MarketingScore 95 · 50,000+Quick AdsenseScore 95 · 20,000+

Facts

Full name
FlatPM - Ad Manager, AdSense and Custom Code
Version
3.2.3
Author
Mikhail Flat
Added
8 Mar 2021
Last updated
7 Jan 2026
Active installs
10,000+
Requires WordPress
5.9
Tested up to
6.9.11
Requires PHP
5.6
Category
E-commerce & Shopping
Tags
ad manager, ads plugin, ad rotation, custom code, ad injection

Questions about FlatPM

Is FlatPM still maintained?

Yes. Last release 7 Jan 2026, 4 releases in the last 24 months.

Who owns FlatPM, and has it changed hands?

No change recorded. Main committer flatboy since Mar 2021.

Was FlatPM removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is FlatPM safe?

3 known vulnerabilities, all fixed (latest in 3.2.3). Not on the exploited list.

Is the latest FlatPM update safe to install?

No ownership change before 3.2.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue