FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login
Healthy: vulnerability published 17 Sep 2026, fixed in 3.0.0.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 100 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 17 Sep 2026, fixed in 3.0.0. Update to version 3.0.0 or later.17 Sep 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 24 Aug 2022 to 24 Aug 2022, 1 commits |
|---|---|
| techjewel | 12 Dec 2022 to 3 Nov 2026, 36 commits |
| adreastrian | 6 Jan 2025 to 6 Jan 2025, 1 commits |
3 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- yesterday
- Releases, 24 months
- 17
- Tested up to
- 7.1 current
- Requires PHP
- 7.3 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 1 |
| Q4 2024 | 2 |
| Q1 2025 | 0 |
| Q2 2025 | 3 |
| Q3 2025 | 0 |
| Q4 2025 | 3 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 4 |
| Q4 2026 | 4 |
Last release 3 Nov 2026. Tested with WordPress 7.1 (current).
Support
100% of 10 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 17 Sep 2026 | FluentAuth – Login Security, Two-Factor Authentication, Passkeys & Social Login <= 2.1.2 - Unauthenticated Email Verification Bypass | 5.3 | <= 2.1.2 | 3.0.0 | 0 |
| 15 Dec 2025 | FluentAuth - Auth Security Plugin <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluent_auth_reset_password' Shortcode | 6.4 | <= 2.0.3 | 2.1.0 | 0 |
| 27 Dec 2022 | FluentAuth <= 1.0.1 - IP Spoofing to Protection Mechanism Bypass | 6.5 | <= 1.0.1 | 1.0.2 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q3 2024 | 5.0 |
|---|---|
| Q4 2024 | 5.0 |
| Q1 2025 | 5.0 |
| Q2 2025 | 4.5 |
| Q3 2025 | 4.7 |
| Q4 2025 | 4.5 |
| Q1 2026 | 5.0 |
| Q2 2026 | 3.7 |
| Q3 2026 | 5.0 |
| Q4 2026 | 3.5 |
Average rating fell from 5.0 to 3.5 between Q3 2024 and Q4 2026.
| 5 star | 22 |
|---|---|
| 4 star | 2 |
| 3 star | 5 |
| 2 star | 4 |
| 1 star | 2 |
- Good Features but for Nerds only · 2 stars · 28 Oct 2026
- A half-baked system · 1 star · 9 Jun 2026
- FluentAuth Plugin: Potential Unmet, Unresolved Issues! · 2 stars · 20 Aug 2023
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 773 |
|---|---|
| 11 May 2026 | 1,008 |
| 18 May 2026 | 1,017 |
| 25 May 2026 | 726 |
| 1 Jun 2026 | 609 |
| 8 Jun 2026 | 560 |
| 15 Jun 2026 | 531 |
| 22 Jun 2026 | 503 |
| 29 Jun 2026 | 385 |
| 6 Jul 2026 | 472 |
| 13 Jul 2026 | 431 |
| 20 Jul 2026 | 488 |
| 27 Jul 2026 | 526 |
| 3 Aug 2026 | 500 |
| 10 Aug 2026 | 473 |
| 17 Aug 2026 | 458 |
| 24 Aug 2026 | 480 |
| 31 Aug 2026 | 453 |
| 7 Sep 2026 | 473 |
| 14 Sep 2026 | 16,084 |
| 21 Sep 2026 | 4,270 |
| 28 Sep 2026 | 6,889 |
| 5 Oct 2026 | 8,701 |
| 12 Oct 2026 | 2,181 |
| 19 Oct 2026 | 7,347 |
| 26 Oct 2026 | 3,727 |
| 2 Nov 2026 | 379 |
Weekly downloads over the last 4 weeks are 52% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 3.1.1 |
|---|---|
| Author | WPManageNinja |
| Added | 12 Dec 2022 |
| Last updated | 3 Nov 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 5.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.3 |
| Category | Security & Privacy > Security Scanning & Malware Protection |
| Tags | login, security, social login, limit login attempts, two factor authentication |
Other plugins by this author: Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder, FluentSMTP - WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP, FluentCRM - Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution, Ninja Tables - Easy Data Table Builder, FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager, Fluent Booking - The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution, Fluent PDF Generator, Fluent Support - Helpdesk & Customer Support Ticket System, FluentCart - Online Store Builder & eCommerce Checkout, FluentCommunity - Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses, Paymattic - Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management, FluentAffiliate - Affiliate Program Management Suite, Affiliates Manager
Questions
Is FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login still maintained?
FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login was last updated on 3 Nov 2026. Its Canary status is Healthy.
Is FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login safe?
FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login?
The wordpress.org author is WPManageNinja. Recent committers: techjewel, adreastrian, plugin-master. We have recorded no ownership change.
What can I use instead of FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login?
We have no healthier plugin in the same category on record yet.