Skip to content
PluginCanary

EmailKit

EmailKit - Email Customizer for WooCommerce & WP
by Roxnor · 70,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 14 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for EmailKit
Ownership100
Maintenance100
Security75
Support70
Reputation75

How the score works

Quick answers

Is EmailKit still maintained?
Yes. Last release 3 Nov 2026, 14 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns EmailKit, and has it changed hands?
No change recorded. Main committer ataurr since Feb 2024. 3 Nov 2026 · SVN log
Was EmailKit removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is EmailKit safe?
5 known vulnerabilities, all fixed (latest in 1.6.6). Not on the exploited list. 4 May 2026 · Wordfence Intelligence
Is the latest EmailKit update safe to install?
No ownership change before 1.7.0. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master8 Oct 2023 to 8 Oct 2023, 1 commits
xpeedstudio11 Oct 2023 to 6 Oct 2025, 17 commits
ataurr28 Feb 2024 to 21 May 2026, 19 commits
roxnor5 Jul 2026 to 3 Nov 2026, 4 commits

New committer roxnor made a first commit on 5 Jul 2026.

Maintenance

Last release
yesterday
Releases, 24 months
14
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for EmailKit
Q1 20243
Q2 20243
Q3 20242
Q4 20241
Q1 20251
Q2 20251
Q3 20251
Q4 20252
Q1 20262
Q2 20262
Q3 20263
Q4 20261

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (3 reviews). Lifetime: 4.7.

Average rating per quarter for EmailKit
Q2 20245.0
Q3 20244.0
Q4 20245.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q2 2024 and Q4 2026.

Rating distribution
5 star14
4 star0
3 star0
2 star0
1 star1
Latest low reviews

Security record

5 vulnerabilities in 24 months, all patched (latest fixed in 1.6.6).

Show 5 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
4 May 2026EmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter6.5<= 1.6.51.6.6Patched before disclosure
20 Mar 2026EmailKit <= 1.6.3 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameter4.9<= 1.6.31.6.4Patched before disclosure
17 Feb 2026EmailKit – Email Customizer for WooCommerce & WP <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Title Modification4.3<= 1.6.21.6.3Patched before disclosure
6 Jan 2026EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal6.5<= 1.6.11.6.2Patched before disclosure
26 Sep 2025EmailKit <= 1.6.0 - Missing Authorization to Authenticated (Author+) Arbitrary Content Deletion4.3<= 1.6.01.6.110

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

70,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for EmailKit
4 May 20263,254
11 May 20265,167
18 May 20266,146
25 May 20263,490
1 Jun 20263,739
8 Jun 20263,641
15 Jun 20263,566
22 Jun 20263,215
29 Jun 20263,465
6 Jul 202620,415
13 Jul 20265,078
20 Jul 20264,712
27 Jul 20264,296
3 Aug 20264,044
10 Aug 202619,778
17 Aug 20265,785
24 Aug 20264,393
31 Aug 20264,288
7 Sep 202612,229
14 Sep 202612,224
21 Sep 20265,791
28 Sep 20263,887
5 Oct 20263,695
12 Oct 20263,231
19 Oct 20263,269
26 Oct 20262,814
2 Nov 2026446

Weekly downloads over the last 4 weeks are 58% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Email Template DesignerScore 91 · 20,000+MailonixScore 89 · 20,000+Email Templates Customizer and DesignerScore 89 · 20,000+

Facts

Version1.7.0
AuthorRoxnor
Added11 Oct 2023
Last updated3 Nov 2026
Active installs70,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsemail template, WordPress Email Builder, WordPress email customizer, woocommerce email customizer, WooCommerce email template customizer

Other plugins by this author: ElementsKit Elementor Addons - Advanced Widgets & Templates Addons for Elementor, MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor, ShopEngine - All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets, GetGenie - AI SEO Assistant & Content Writer with Keyword Research, AEO & GEO, Wp Social Login and Register Social Counter, Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers, WP Ultimate Review, ShopEngine Gutenberg WooCommerce Builder Blocks Addon - All in One WooCommerce Solution, TableKit - WordPress Table Builder for Data Tables, WooCommerce Product Tables & Post Tables, Dynamic Fields Engine - Custom post types, Custom fields, Meta fields, Taxonomies, Listing builder, Query builder and Relations, Rox Appointment Booking - Event, Calendar & Appointment Scheduling, FundEngine - Donation and Crowdfunding Platform

Questions

Is EmailKit still maintained?

Yes. Last release 3 Nov 2026, 14 releases in the last 24 months.

Who owns EmailKit, and has it changed hands?

No change recorded. Main committer ataurr since Feb 2024.

Was EmailKit removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is EmailKit safe?

5 known vulnerabilities, all fixed (latest in 1.6.6). Not on the exploited list.

Is the latest EmailKit update safe to install?

No ownership change before 1.7.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue