Skip to content
PluginCanary

Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

by Kit · 40,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 29 Oct 2026, fixed in 3.4.8.

87/ 100 Canary Score
Sub-scores for Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 3.4.8. Update to version 3.4.8 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 3.4.7. Update to version 3.4.7 or later.16 Oct 2026Evidence
  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
nathanbarry30 Mar 2015 to 28 Jul 2021, 48 commits
growdev30 Oct 2018 to 4 Jan 2019, 3 commits
travisnorthcutt7 Jan 2019 to 22 Jan 2020, 15 commits
ggwicz11 Nov 2020 to 22 Feb 2021, 7 commits
convertkit15 Dec 2021 to 3 Nov 2026, 167 commits

5 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
73
Tested up to
7.1 current
Requires PHP
7.1 supported 8.2+
Releases per quarter for Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership
Q1 20246
Q2 20244
Q3 202410
Q4 202411
Q1 20256
Q2 20256
Q3 202510
Q4 202511
Q1 202612
Q2 20266
Q3 202611
Q4 20264

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
29 Oct 2026Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership <= 3.4.7 - Missing Authorization5.3<= 3.4.73.4.80
16 Oct 2026Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages <= 3.4.6 - Missing Authorization5.3<= 3.4.63.4.70
22 Jul 2026Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages <= 3.3.5 - Missing Authorization5.3<= 3.3.53.3.60
20 Jun 2024ConvertKit <= 2.4.9 - Missing Authorization5.3<= 2.4.92.4.9.10
5 Apr 2024ConvertKit <= 2.4.5 - Unauthenticated Sensitive Information Exposure5.3<= 2.4.52.4.60
15 May 2023ConvertKit <= 2.2.0 - Reflected Cross-Site Scripting6.1<= 2.2.02.2.10
23 Dec 2022ConvertKit <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 2.0.42.0.50

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20254.5
Q2 20253.7
Q3 20255.0
Q4 20254.8
Q1 20265.0
Q2 20265.0

Average rating stayed at 5.0 between Q1 2024 and Q2 2026.

Rating distribution
5 star83
4 star3
3 star2
2 star1
1 star1
Latest low reviews

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership
4 May 20262,974
11 May 20263,884
18 May 202628,503
25 May 20264,896
1 Jun 20262,640
8 Jun 20262,026
15 Jun 202621,375
22 Jun 20265,882
29 Jun 20263,105
6 Jul 202627,981
13 Jul 20264,629
20 Jul 202626,237
27 Jul 202627,249
3 Aug 202610,597
10 Aug 202629,869
17 Aug 202629,496
24 Aug 202624,858
31 Aug 20266,630
7 Sep 202625,255
14 Sep 202650,847
21 Sep 202632,006
28 Sep 202626,001
5 Oct 202630,667
12 Oct 202626,597
19 Oct 20266,323
26 Oct 202631,310
2 Nov 20261,046

Weekly downloads over the last 4 weeks are 11% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SureContact - Newsletters, Email Marketing, Automation, Revenue Tracking & CRMScore 93 · 10,000+Hostinger Reach - AI-Powered Email Marketing for WordPressScore 91 · 1,000,000+MailPoet - Newsletters, Email Marketing, and AutomationScore 91 · 500,000+KlaviyoScore 91 · 100,000+Newsletters, Email Marketing, SMS and Popups by OmnisendScore 91 · 100,000+

Facts

Version3.4.9
AuthorKit
Added30 Mar 2015
Last updated3 Nov 2026
Active installs40,000+
Requires WordPress5.6
Tested up to7.1.4
Requires PHP7.1
CategoryE-commerce & Shopping
Tagsmembership, landing page, Email Marketing, email newsletter, email subscribers

Other plugins by this author: Gravity Forms ConvertKit Add-On

Questions

Is Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership still maintained?

Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership safe?

Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership?

The wordpress.org author is Kit. Recent committers: convertkit, nathanbarry, ggwicz, travisnorthcutt, growdev. We have recorded no ownership change.

What can I use instead of Kit (formerly ConvertKit) - Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership?

Plugins in the same category with a higher Canary Score: SureContact - Newsletters, Email Marketing, Automation, Revenue Tracking & CRM, Hostinger Reach - AI-Powered Email Marketing for WordPress, MailPoet - Newsletters, Email Marketing, and Automation, Klaviyo, Newsletters, Email Marketing, SMS and Popups by Omnisend.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue