Twenty-nine vulnerabilities in total were fixed with Firefox 55, the first iteration of the browser to turn on click-to-activate functionality for Flash by default.

Firefox 47 also switches all NPAPI plugins, other than Flash, to click-to-activate by default. The whitelist plugin has been expired in the eyes of Mozilla developers for a while now.