Skip to content
PluginCanary

UX Flat

by COP · 2,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical2 Warnings

Avoid: vulnerability published 20 Jan 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for UX Flat
Ownership100
Maintenance20
Security35
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 20 Jan 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.3 Feb 2026Evidence
  • WarningMNT-2Tested up to WordPress 6.7.11, 4 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • WarningMNT-1No release in 16 months (last release 29 Jun 2025). Plan a replacement if the plugin is important to your site.29 Jun 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master29 Sep 2022 to 29 Sep 2022, 1 commits
wpvncom30 Sep 2022 to 29 Jun 2025, 81 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
16 months ago
Releases, 24 months
2
Tested up to
6.7 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter for UX Flat
Q1 20240
Q2 20249
Q3 202410
Q4 20240
Q1 20250
Q2 20252
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 29 Jun 2025. Tested up to 6.7, 4 major versions behind WordPress 7.1.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
20 Jan 2026UX Flat <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.4.0No fixn/a
19 Mar 2024UX Flat <= 4.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode7.4<= 4.44.5n/a

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.7 from 13 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star12
4 star0
3 star0
2 star0
1 star1

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for UX Flat
4 May 202631
11 May 202652
18 May 202637
25 May 202649
1 Jun 202646
8 Jun 202651
15 Jun 202634
22 Jun 202624
29 Jun 202647
6 Jul 202637
13 Jul 202633
20 Jul 202643
27 Jul 202648
3 Aug 202688
10 Aug 2026102
17 Aug 202676
24 Aug 202659
31 Aug 202651
7 Sep 202690
14 Sep 2026104
21 Sep 202690
28 Sep 202687
5 Oct 2026103
12 Oct 202666
19 Oct 2026103
26 Oct 2026107
2 Nov 202616

Weekly downloads over the last 4 weeks are 18% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Starter Sites & Templates by NeveScore 91 · 100,000+Sydney ToolboxScore 91 · 50,000+Import / Export Customizer SettingsScore 91 · 50,000+Bosa Starter SitesScore 91 · 30,000+Clever FoxScore 91 · 30,000+

Facts

Version5.4.0
AuthorCOP
Added30 Sep 2022
Last updated29 Jun 2025
Active installs2,000+
Requires WordPress6.2
Tested up to6.7.11
Requires PHP7.4
CategoryDesign & Themes > Themes & Templates
Tagsflatux, uxflat, flatsome, ux flatsome, element flatsome

Other plugins by this author: WP EXtra - One Click Optimize

Questions

Is UX Flat still maintained?

UX Flat was last updated on 29 Jun 2025. Its Canary status is Avoid.

Is UX Flat safe?

UX Flat has 1 published vulnerability with no patched version. Its Canary status is Avoid.

Who owns UX Flat?

The wordpress.org author is COP. Recent committers: wpvncom, plugin-master. We have recorded no ownership change.

What can I use instead of UX Flat?

Plugins in the same category with a higher Canary Score: Starter Sites & Templates by Neve, Sydney Toolbox, Import / Export Customizer Settings, Bosa Starter Sites, Clever Fox.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue