HubSpot All-In-One Marketing - Forms, Popups, Live Chat
Healthy: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 90 |
| Security | 85 |
| Support | 70 |
| Reputation | 60 |
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
- InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
- InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| leadin | 14 Jul 2015 to 19 Jul 2019, 184 commits |
|---|---|
| HubSpotDev | 8 Aug 2019 to 16 Sep 2026, 293 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 49 days ago
- Releases, 24 months
- 27
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- 7.2 supported 8.2+
| Q1 2024 | 8 |
|---|---|
| Q2 2024 | 14 |
| Q3 2024 | 3 |
| Q4 2024 | 4 |
| Q1 2025 | 3 |
| Q2 2025 | 2 |
| Q3 2025 | 2 |
| Q4 2025 | 1 |
| Q1 2026 | 5 |
| Q2 2026 | 1 |
| Q3 2026 | 11 |
| Q4 2026 | 0 |
Last release 16 Sep 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Support
0% of 2 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 16 Jul 2026 | HubSpot All-In-One Marketing <= 11.3.62 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Script | 4.3 | <= 11.3.62 | 11.3.64 | 0 |
| 1 Jul 2026 | HubSpot All-In-One Marketing – Forms, Popups, Live Chat <= 11.3.55 - Authenticated (Contributor+) Information Exposure | 4.3 | <= 11.3.55 | 11.3.56 | 6 |
| 23 Apr 2026 | HubSpot All-In-One Marketing - Forms, Popups, Live Chat <= 11.3.32 - Missing Authorization to Authenticated (Contributor+) Installed Plugin Disclosure | 4.3 | <= 11.3.32 | 11.3.33 | 0 |
| 29 Aug 2024 | HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 11.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via HubSpot Meeting Widget | 6.4 | <= 11.1.22 | 11.1.34 | 0 |
| 11 Apr 2022 | HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics <= 8.8.13 - Server Side Request Forgery | 8.1 | < 8.8.15 | 8.8.15 | n/a |
Source: Wordfence Intelligence.
Reputation
| Q1 2024 | 3.5 |
|---|---|
| Q2 2024 | 5.0 |
| Q3 2024 | 5.0 |
| Q4 2024 | 1.5 |
| Q4 2025 | 1.0 |
Average rating fell from 3.5 to 1.0 between Q1 2024 and Q4 2025.
| 5 star | 158 |
|---|---|
| 4 star | 13 |
| 3 star | 5 |
| 2 star | 10 |
| 1 star | 21 |
- plugin sends spam contacts · 1 star · 16 Oct 2025
- Tracking code does not load · 2 stars · 18 Dec 2024
- Always disconnecting the plugin · 1 star · 22 Oct 2024
Momentum
200,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 7,371 |
|---|---|
| 11 May 2026 | 18,203 |
| 18 May 2026 | 51,572 |
| 25 May 2026 | 16,261 |
| 1 Jun 2026 | 13,216 |
| 8 Jun 2026 | 12,905 |
| 15 Jun 2026 | 10,525 |
| 22 Jun 2026 | 105,195 |
| 29 Jun 2026 | 22,934 |
| 6 Jul 2026 | 307,700 |
| 13 Jul 2026 | 78,257 |
| 20 Jul 2026 | 20,398 |
| 27 Jul 2026 | 100,883 |
| 3 Aug 2026 | 66,588 |
| 10 Aug 2026 | 102,137 |
| 17 Aug 2026 | 65,578 |
| 24 Aug 2026 | 110,102 |
| 31 Aug 2026 | 24,498 |
| 7 Sep 2026 | 107,576 |
| 14 Sep 2026 | 134,996 |
| 21 Sep 2026 | 37,643 |
| 28 Sep 2026 | 17,887 |
| 5 Oct 2026 | 15,590 |
| 12 Oct 2026 | 13,311 |
| 19 Oct 2026 | 16,536 |
| 26 Oct 2026 | 13,875 |
| 2 Nov 2026 | 2,039 |
Weekly downloads over the last 4 weeks are 79% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 11.3.75 |
|---|---|
| Author | HubSpot |
| Added | 12 Mar 2014 |
| Last updated | 16 Sep 2026 |
| Active installs | 200,000+ |
| Requires WordPress | 5.8 |
| Tested up to | 6.9.11 |
| Requires PHP | 7.2 |
| Category | Customer Management > CRM & Customer Database |
| Tags | crm, forms, analytics, live chat, marketing |
Questions
Is HubSpot All-In-One Marketing - Forms, Popups, Live Chat still maintained?
HubSpot All-In-One Marketing - Forms, Popups, Live Chat was last updated on 16 Sep 2026. Its Canary status is Healthy.
Is HubSpot All-In-One Marketing - Forms, Popups, Live Chat safe?
HubSpot All-In-One Marketing - Forms, Popups, Live Chat has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns HubSpot All-In-One Marketing - Forms, Popups, Live Chat?
The wordpress.org author is HubSpot. Recent committers: HubSpotDev, leadin, AndyGCook, plugin-master. We have recorded no ownership change.
What can I use instead of HubSpot All-In-One Marketing - Forms, Popups, Live Chat?
Plugins in the same category with a higher Canary Score: Leadinfo, ActiveCampaign for WooCommerce, WP Fusion Lite - Marketing Automation and CRM Integration for WordPress, FluentCRM - Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution, Jetpack CRM - Clients, Leads, Invoices, Billing, Email Marketing, & Automation.