Skip to content
PluginCanary

ActiveCampaign

ActiveCampaign - The autonomous marketing platform
by activecampaign · 40,000+ active installs · Checked 4 Nov 2026
Watch1 Warning

Watch: tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.

77/ 100 Canary Score
Sub-scores for ActiveCampaign
Ownership100
Maintenance50
Security95
Support70
Reputation70

How the score works

Quick answers

Is ActiveCampaign still maintained?
Yes. Last release 14 Nov 2025, 0 releases in the last 24 months. 14 Nov 2025 · wordpress.org
Who owns ActiveCampaign, and has it changed hands?
No change recorded. Main committer activecampaign since Oct 2009. 4 Nov 2026 · SVN log
Was ActiveCampaign removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is ActiveCampaign safe?
4 known vulnerabilities, all fixed (latest in 8.1.17). Not on the exploited list. 4 Apr 2025 · Wordfence Intelligence
Is the latest ActiveCampaign update safe to install?
No ownership change before 8.1.21. No one-star spike after it. 10 May 2012 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
activecampaign15 Oct 2009 to 14 Nov 2025, 201 commits

1 committer recorded. No ownership change since 2009.

Maintenance

Last release
12 months ago
Releases, 24 months
0
Tested up to
6.8 vs 7.1
Requires PHP
5.4 supported 8.2+
Releases per quarter
Releases per quarter for ActiveCampaign
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 14 Nov 2025. Tested up to 6.8, 3 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.5.

Rating distribution
5 star22
4 star3
3 star1
2 star2
1 star1
Latest low reviews

Security record

1 vulnerability in 24 months (4 on record), patched (latest fixed in 8.1.17).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
4 Apr 2025ActiveCampaign <= 8.1.16 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 8.1.168.1.17n/a
12 Apr 2024ActiveCampaign <= 8.1.14 - Authenticated (Administrator+) Server-Side Request Forgery5.5<= 8.1.148.1.15n/a
20 Apr 2023ActiveCampaign - Forms, Site Tracking, Live Chat <= 8.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 8.1.118.1.12n/a
6 Sep 2020ActiveCampaign < 8.0.2 - Cross-Site Request Forgery4.3< 8.0.28.0.2n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for ActiveCampaign
4 May 2026454
11 May 20261,237
18 May 20261,098
25 May 2026946
1 Jun 2026939
8 Jun 2026822
15 Jun 2026782
22 Jun 2026773
29 Jun 2026798
6 Jul 2026714
13 Jul 2026737
20 Jul 2026965
27 Jul 2026947
3 Aug 2026876
10 Aug 2026968
17 Aug 2026859
24 Aug 20261,014
31 Aug 20261,018
7 Sep 2026877
14 Sep 20261,012
21 Sep 2026958
28 Sep 20261,142
5 Oct 20261,212
12 Oct 2026943
19 Oct 20261,405
26 Oct 20261,043
2 Nov 2026328

Weekly downloads over the last 4 weeks are 1% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

SureContactScore 93 · 10,000+Hostinger ReachScore 91 · 1,000,000+MailPoetScore 91 · 500,000+Newsletters, Email Marketing, SMS andScore 91 · 100,000+KlaviyoScore 91 · 100,000+

Facts

Version8.1.21
Authoractivecampaign
Added15 Oct 2009
Last updated14 Nov 2025
Active installs40,000+
Requires WordPress2.0
Tested up to6.8.12
Requires PHP5.4
CategoryE-commerce & Shopping
TagsAI agent, activecampaign, business growth, Email Marketing, marketing automation

Questions

Is ActiveCampaign still maintained?

Yes. Last release 14 Nov 2025, 0 releases in the last 24 months.

Who owns ActiveCampaign, and has it changed hands?

No change recorded. Main committer activecampaign since Oct 2009.

Was ActiveCampaign removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is ActiveCampaign safe?

4 known vulnerabilities, all fixed (latest in 8.1.17). Not on the exploited list.

Is the latest ActiveCampaign update safe to install?

No ownership change before 8.1.21. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue