Flag Icons
Avoid: vulnerability published 31 Mar 2025 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 31 Mar 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.14 Apr 2025Evidence
- CriticalMNT-1No release in 55 months (last release 10 Apr 2022). Plan a replacement if the plugin is important to your site.10 Apr 2023Evidence
- WarningMNT-2Tested up to WordPress 5.8.19, 13 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| havengr | 8 Jul 2013 to 10 Apr 2022, 80 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 5 years ago
- Releases, 24 months
- 0
- Tested up to
- 5.8 vs 7.1
- Requires PHP
- not stated supported 8.2+
Last release 10 Apr 2022. Tested up to 5.8, 13 major versions behind WordPress 7.1. Release history builds as we see new versions.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 31 Mar 2025 | Flag Icons <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 2.2 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.9 from 20 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 19 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
3,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 19 |
|---|---|
| 11 May 2026 | 49 |
| 18 May 2026 | 63 |
| 25 May 2026 | 45 |
| 1 Jun 2026 | 33 |
| 8 Jun 2026 | 45 |
| 15 Jun 2026 | 36 |
| 22 Jun 2026 | 26 |
| 29 Jun 2026 | 26 |
| 6 Jul 2026 | 25 |
| 13 Jul 2026 | 27 |
| 20 Jul 2026 | 46 |
| 27 Jul 2026 | 52 |
| 3 Aug 2026 | 59 |
| 10 Aug 2026 | 51 |
| 17 Aug 2026 | 49 |
| 24 Aug 2026 | 42 |
| 31 Aug 2026 | 52 |
| 7 Sep 2026 | 58 |
| 14 Sep 2026 | 74 |
| 21 Sep 2026 | 86 |
| 28 Sep 2026 | 82 |
| 5 Oct 2026 | 81 |
| 12 Oct 2026 | 62 |
| 19 Oct 2026 | 92 |
| 26 Oct 2026 | 95 |
| 2 Nov 2026 | 16 |
Weekly downloads over the last 4 weeks are 29% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2.2 |
|---|---|
| Author | Vasilis Triantafyllou |
| Added | 8 Jul 2013 |
| Last updated | 10 Apr 2022 |
| Active installs | 3,000+ |
| Requires WordPress | 3.3 |
| Tested up to | 5.8.19 |
| Requires PHP | not stated |
| Category | Multilingual & Accessibility > Translation & Multilingual Management |
| Tags | flags, icons, switch, language, multisite |
Other plugins by this author: Delay Redirect
Questions
Is Flag Icons still maintained?
Flag Icons was last updated on 10 Apr 2022. Its Canary status is Avoid.
Is Flag Icons safe?
Flag Icons has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns Flag Icons?
The wordpress.org author is Vasilis Triantafyllou. Recent committers: havengr, plugin-master. We have recorded no ownership change.
What can I use instead of Flag Icons?
Plugins in the same category with a higher Canary Score: Translate WordPress with GTranslate, Translate WordPress - Google Language Translator, ووکامرس فارسی | فارسی و شمسی ساز وردپرس و ووکامرس, LocoAI - Auto Translate for Loco Translate, Say What?.