Skip to content
PluginCanary

Keap Official Opt-in Forms

by Keap · 1,000+ active installs · Checked 3 Nov 2026
Avoid2 Criticals2 Warnings

Avoid: vulnerability published 30 Sep 2024 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for Keap Official Opt-in Forms
Ownership100
Maintenance20
Security30
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 30 Sep 2024 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.14 Oct 2024Evidence
  • CriticalSEC-2Vulnerability published 3 Jan 2024 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.17 Jan 2024Evidence
  • WarningMNT-2Tested up to WordPress 6.7.11, 4 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • WarningMNT-1No release in 19 months (last release 31 Mar 2025). Plan a replacement if the plugin is important to your site.31 Mar 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Infusionsoft24 Apr 2017 to 31 Mar 2025, 49 commits
michael.fairchild20 Feb 2019 to 20 Feb 2019, 2 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
19 months ago
Releases, 24 months
0
Tested up to
6.7 vs 7.1
Requires PHP
8.0 supported 8.2+
Releases per quarter for Keap Official Opt-in Forms
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 31 Mar 2025. Tested up to 6.7, 4 major versions behind WordPress 7.1.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
17 Feb 2025Keap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File Inclusion9.8<= 2.0.12.0.2n/a
30 Sep 2024Keap Official Opt-in Forms <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.0.3No fixn/a
3 Jan 2024Keap Official Opt-in Forms <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.0.3No fixn/a
21 Dec 2023Keap Official Opt-in Forms <= 1.0.11 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.0.111.0.12n/a

Source: Wordfence Intelligence.

Reputation

Lifetime rating 1.9 from 14 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star2
4 star1
3 star0
2 star1
1 star10

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Keap Official Opt-in Forms
4 May 202643
11 May 202680
18 May 202685
25 May 202672
1 Jun 202651
8 Jun 202674
15 Jun 202643
22 Jun 202645
29 Jun 202653
6 Jul 202647
13 Jul 202653
20 Jul 202660
27 Jul 202661
3 Aug 202673
10 Aug 202666
17 Aug 202679
24 Aug 202664
31 Aug 202678
7 Sep 202679
14 Sep 202696
21 Sep 2026106
28 Sep 202695
5 Oct 202677
12 Oct 202680
19 Oct 2026150
26 Oct 2026122
2 Nov 202636

Weekly downloads over the last 4 weeks are 33% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Poptin - Email Marketing Automation, Newsletter & Exit Pop Ups, Email PopupsScore 96 · 20,000+Pop-upScore 93 · 10,000+Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead GenerationScore 92 · 1,000,000+Boxzilla - WordPress Popup BuilderScore 92 · 20,000+Popups for DiviScore 91 · 100,000+

Facts

Version2.0.3
AuthorKeap
Added24 Apr 2017
Last updated31 Mar 2025
Active installs1,000+
Requires WordPress6.0
Tested up to6.7.11
Requires PHP8.0
CategoryMarketing & Advertising > Email Marketing & Campaigns
TagsKeap, keap api, infusionsoft, keap wordpress, wordpress popup plugin

Questions

Is Keap Official Opt-in Forms still maintained?

Keap Official Opt-in Forms was last updated on 31 Mar 2025. Its Canary status is Avoid.

Is Keap Official Opt-in Forms safe?

Keap Official Opt-in Forms has 2 published vulnerabilities with no patched version. Its Canary status is Avoid.

Who owns Keap Official Opt-in Forms?

The wordpress.org author is Keap. Recent committers: Infusionsoft, michael.fairchild, plugin-master. We have recorded no ownership change.

What can I use instead of Keap Official Opt-in Forms?

Plugins in the same category with a higher Canary Score: Poptin - Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups, Pop-up, Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, Boxzilla - WordPress Popup Builder, Popups for Divi.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue