Skip to content
PluginCanary

Brevo

Brevo - Email, SMS, Web Push, Chat, and more.
by Brevo · 100,000+ active installs · Checked 4 Nov 2026
Watch1 Warning

Watch: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.

79/ 100 Canary Score
Sub-scores for Brevo
Ownership100
Maintenance75
Security95
Support33
Reputation75

How the score works

Quick answers

Is Brevo still maintained?
Yes. Last release 24 Jun 2026, 26 releases in the last 24 months. 24 Jun 2026 · wordpress.org
Who owns Brevo, and has it changed hands?
No change recorded. Main committer prikuma since Jul 2023. 4 Nov 2026 · SVN log
Was Brevo removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Brevo safe?
9 known vulnerabilities, all fixed (latest in 3.3.1). Not on the exploited list. 17 Feb 2026 · Wordfence Intelligence
Is the latest Brevo update safe to install?
No ownership change before 3.3.5. No one-star spike after it. 24 Jun 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
neeraj_slit6 Sep 2012 to 27 Mar 2021, 173 commits
amarsib9 Apr 2021 to 22 Feb 2022, 51 commits
gouravgupta247 Mar 2022 to 22 May 2023, 22 commits
vikaskushwha25 Mar 2022 to 25 Mar 2022, 1 commits
shubham7734 Apr 2022 to 9 Jun 2022, 4 commits
ksendinblue16 Jun 2023 to 2 Apr 2025, 20 commits
prikuma17 Jul 2023 to 24 Jun 2026, 24 commits
sserhii31 Jul 2024 to 31 Jul 2024, 1 commits
ankitabrevo3 Oct 2024 to 1 Apr 2026, 7 commits
anmolbrevo2412 Jun 2025 to 10 Apr 2026, 5 commits

10 committers recorded. No ownership change since 2012.

Maintenance

Last release
4 months ago
Releases, 24 months
26
Tested up to
6.9 vs 7.1
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for Brevo
Q1 20246
Q2 20244
Q3 20244
Q4 20246
Q1 20254
Q2 20258
Q3 20253
Q4 20251
Q1 20263
Q2 20263
Q3 20260
Q4 20260

Last release 24 Jun 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.1.

Average rating per quarter for Brevo
Q3 20245.0
Q4 20242.6
Q1 20253.0
Q2 20252.8
Q3 20251.0
Q4 20254.0
Q1 20262.3
Q2 20265.0
Q3 20265.0

Average rating stayed at 5.0 between Q3 2024 and Q3 2026.

Rating distribution
5 star206
4 star14
3 star8
2 star11
1 star45
Latest low reviews

Security record

1 vulnerability in 24 months (9 on record), patched (latest fixed in 3.3.1).

Show 9 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
17 Feb 2026Brevo - Email, SMS, Web Push, Chat, and more. <= 3.3.0 - Unauthenticated Authorization Bypass via Type Juggling6.5<= 3.3.03.3.1Patched before disclosure
9 Oct 2024Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery4.3<= 3.1.873.1.88Patched before disclosure
16 Aug 2024Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.82 - Cross-Site Request Forgery4.3<= 3.1.823.1.83Patched before disclosure
3 Jun 2024Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.77 - Reflected Cross-Site Scripting6.1<= 3.1.773.1.78Patched before disclosure
22 Mar 2024Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting6.1<= 3.1.773.1.78Patched before disclosure
10 May 2023Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.60 - Reflected Cross-Site Scripting via 'lang'6.1<= 3.1.603.1.61Patched before disclosure
8 Apr 2022Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.39 - Cross-Site Scripting7.2<= 3.1.393.1.401
12 Jan 2022Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.30 - Reflected Cross-Site Scripting via lang & pid Parameters6.1< 3.1.313.1.31Patched before disclosure
23 Dec 2021Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.24 - Reflected Cross-Site Scripting6.1< 3.1.253.1.25Patched before disclosure

Changelog mentions of security fixes: 3.3.5 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

33% of 6 support threads resolved in the last 2 months.

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Brevo
4 May 20262,347
11 May 20267,343
18 May 202611,143
25 May 20266,397
1 Jun 20266,048
8 Jun 20265,965
15 Jun 20265,350
22 Jun 202666,739
29 Jun 202618,324
6 Jul 202617,141
13 Jul 20269,630
20 Jul 20269,668
27 Jul 20267,265
3 Aug 20266,758
10 Aug 20265,650
17 Aug 20265,590
24 Aug 20265,788
31 Aug 20265,928
7 Sep 20265,340
14 Sep 20265,596
21 Sep 20265,459
28 Sep 20265,183
5 Oct 20265,390
12 Oct 20264,547
19 Oct 20266,471
26 Oct 20265,661
2 Nov 2026945

Weekly downloads over the last 4 weeks are 52% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

KlaviyoScore 100 · 100,000+Mailjet Email MarketingScore 98 · 10,000+SureContactScore 97 · 10,000+Mailchimp List Subscribe FormScore 95 · 60,000+Kit (formerly ConvertKit)Score 95 · 40,000+

Facts

Version3.3.5
AuthorBrevo
Added6 Sep 2012
Last updated24 Jun 2026
Active installs100,000+
Requires WordPress4.4
Tested up to6.9.11
Requires PHP5.6
CategoryE-commerce & Shopping
Tagsbrevo, forms, newsletter, sendinblue, Email Marketing

Other plugins by this author: Brevo for WooCommerce

Questions

Is Brevo still maintained?

Yes. Last release 24 Jun 2026, 26 releases in the last 24 months.

Who owns Brevo, and has it changed hands?

No change recorded. Main committer prikuma since Jul 2023.

Was Brevo removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Brevo safe?

9 known vulnerabilities, all fixed (latest in 3.3.1). Not on the exploited list.

Is the latest Brevo update safe to install?

No ownership change before 3.3.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue