Flying Scripts: Delay JavaScript to Improve Site Speed & Performance

Flying Scripts: Delay JavaScript to Improve Site Speed & Performance has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Flying Scripts: Delay JavaScript to Improve Site Speed & Performance has a vendor fix available, so running the current release closes it.

All of these findings were reported by Santh. Flying Scripts: Delay JavaScript to Improve Site Speed & Performance is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.7.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Flying Scripts: Delay JavaScript to Improve Site Speed & Performance vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2026-109990

Flying Scripts: Delay JavaScript to Improve Site Speed & Performance <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content

Read the full analysis

Vulnerability Records

1 records


2026-10-15 15:35	Flying Scripts: Delay JavaScript to Improve Site Speed & Performance <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content Flying Scripts <= 1.2.4	`CVE-2026-109990`	7.2 High	Santh	Yes

Showing 1–1 of 1 reports

Latestv1.2.5

Flying Scripts: Delay JavaScript to Improve Site Speed & Performance

Author

Gijo Varghese

5.0(38)

100/100

Last Updated

2026-10-10 (10d ago)

Active Installs

30,000+

Downloads

312,656

Requires WP

4.5+

Requires PHP

5.6+

Tested up to

WP 7.0.7

Created

2020-02-06 (7y ago)

Download and execute JavaScript on user interaction. Demo video Flying Scripts delay the execution of JavaScript until there is no user activity. You can specify keywords to include JavaScripts to be delayed. There is also a timeout which executes JavaScript when there is no user activity. Why should I use this plugin? JavaScript is very resource-heavy. By delaying the execution of non-critical JavaScript (that are not needed for the initial render), you’re prioritizing and giving more resources to critical JavaScript files. This way you will reduce render time, time to interactive, first CPU idle, max Potential input delay etc. This will also reduce initial payload to browsers by reducing the no. of requests. Support Official Support Forum Facebook Group Our premium products FlyingPress FlyingCDN Our free plugins Flying Pages Flying Images Flying Scripts Flying Analytics Flying Fonts Contributors Gijo Varghese – WP Speed Matters Shay Toder

View on WordPress.org