Skip to content
PluginCanary
Limited data: this plugin has under 1,000 active installs and less than 12 weeks of history with us, so we show signals but no status band yet.

Arigato Autoresponder and Newsletter

by Bob · 500+ active installs · Checked 4 Nov 2026
Limited data1 Critical

Limited data: Arigato Autoresponder and Newsletter has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.

39/ 100 Canary Score

Capped at 39: a vulnerability has no patch.

Sub-scores for Arigato Autoresponder and Newsletter
Ownership100
Maintenance100
Security35
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Arigato Autoresponder and Newsletter still maintained?
Yes. Last release 3 Sep 2026, 5 releases in the last 24 months. 3 Sep 2026 · wordpress.org
Who owns Arigato Autoresponder and Newsletter, and has it changed hands?
No change recorded. Main committer prasunsen since Jan 2010. 4 Nov 2026 · SVN log
Was Arigato Autoresponder and Newsletter removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Arigato Autoresponder and Newsletter safe?
No. 1 known vulnerability has no fix in the current version. 17 Apr 2025 · Wordfence Intelligence
Is the latest Arigato Autoresponder and Newsletter update safe to install?
No ownership change before 2.7.2.8. No one-star spike after it. 3 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 17 Oct 2018 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.31 Oct 2018Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
prasunsen16 Jan 2010 to 3 Sep 2026, 231 commits

1 committer recorded. No ownership change since 2010.

Maintenance

Last release
2 months ago
Releases, 24 months
5
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter
Releases per quarter for Arigato Autoresponder and Newsletter
Q1 20240
Q2 20240
Q3 20240
Q4 20241
Q1 20250
Q2 20252
Q3 20251
Q4 20250
Q1 20260
Q2 20260
Q3 20261
Q4 20260

Last release 3 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Rating distribution
5 star29
4 star2
3 star2
2 star0
1 star1

Security record

1 vulnerability in 24 months (18 on record), 1 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
17 Oct 2018Arigato Autoresponder and Newsletter <= 2.7 - Arbitrary File Upload9.8allNo fixn/a
Show 17 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
17 Apr 2025Arigato Autoresponder and Newsletter <= 2.7.2.4 - Reflected Cross-Site Scripting6.1<= 2.7.2.42.7.2.5n/a
9 May 2024Arigato Autoresponder and Newsletter <= 2.7.2.3 - Cross-Site Request Forgery4.3<= 2.7.2.32.7.2.4n/a
9 Nov 2023Arigato Autoresponder and Newsletter <= 2.7.2.2 - Cross-Site Request Forgery4.3<= 2.7.2.22.7.2.3n/a
6 Feb 2023Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting5.5<= 2.7.12.7.1.1n/a
6 Feb 2023Arigato Autoresponder and Newsletter <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.7.12.7.1.1n/a
2 Feb 2023Arigato Autoresponder and Newsletter <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.7.12.7.1.1n/a
31 Jan 2023Arigato Autoresponder and Newsletter <= 2.1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.1.7.12.1.7.2n/a
18 Sep 2018Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting6.1<= 2.5.1.82.5.1.9n/a
18 Sep 2018Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting6.1<= 2.5.1.82.5.1.9n/a
18 Sep 2018Arigato Autoresponder and Newsletter <= 2.5.1.8 - SQL Injection7.2<= 2.5.1.82.5.1.9n/a
18 Sep 2018Arigato Autoresponder and Newsletter <= 2.5.1.8 - Cross-Site Scripting4.8<= 2.5.1.82.5.1.9n/a
18 Sep 2018Arigato Autoresponder and Newsletter <= 2.5.1.8 - Cross-Site Scripting4.8<= 2.5.1.82.5.1.9n/a
18 Sep 2018Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting6.1<= 2.5.1.82.5.1.9n/a
18 Sep 2018Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting6.1<= 2.5.1.82.5.1.9n/a
18 Sep 2018Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting6.1<= 2.5.1.82.5.1.9n/a
18 Sep 2018Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting6.1<= 2.5.1.82.5.1.9n/a
18 Sep 2018Arigato Autoresponder and Newsletter <= 2.5.1.8 - Reflected Cross-Site Scripting6.1<= 2.5.1.82.5.1.9n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

500+ active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.7.2.8
AuthorBob
Added16 Jan 2010
Last updated3 Sep 2026
Active installs500+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP8.0
Categorynot stated
Tagsnewsletter, contact form, mailing list, Autoresponder, auto responder

Other plugins by this author: Watu Quiz, Chained Quiz, Investment Calculator, Likert Survey Master, Shortcode Revolution, Hostel, Data Tensai for Contact Form 7, Quizzes for BuddyPress, Watu to MailChimp

Questions

Is Arigato Autoresponder and Newsletter still maintained?

Yes. Last release 3 Sep 2026, 5 releases in the last 24 months.

Who owns Arigato Autoresponder and Newsletter, and has it changed hands?

No change recorded. Main committer prasunsen since Jan 2010.

Was Arigato Autoresponder and Newsletter removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Arigato Autoresponder and Newsletter safe?

No. 1 known vulnerability has no fix in the current version.

Is the latest Arigato Autoresponder and Newsletter update safe to install?

No ownership change before 2.7.2.8. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue