MailPoet - Newsletters, Email Marketing, and Automation
Healthy: vulnerability published 26 Oct 2026, fixed in 5.14.2.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | 77 |
| Reputation | 85 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| wysija | 28 Oct 2016 to 11 May 2021, 615 commits |
|---|---|
| MailPoet | 18 May 2021 to 11 Feb 2025, 397 commits |
| lysyjan87 | 16 Jul 2024 to 6 Oct 2026, 34 commits |
| wxa1 | 23 Jul 2024 to 18 Feb 2025, 8 commits |
| janjakes | 30 Jul 2024 to 18 Sep 2024, 4 commits |
| neosinner | 6 Aug 2024 to 25 Jun 2026, 52 commits |
| costasovo | 13 Aug 2024 to 3 Nov 2026, 34 commits |
| paveldohnal | 27 Aug 2024 to 20 Oct 2026, 34 commits |
| triple0t | 22 Oct 2024 to 22 Oct 2024, 2 commits |
| seuna8c | 10 Dec 2024 to 13 Oct 2026, 32 commits |
| websupporter | 18 Dec 2024 to 18 Dec 2024, 1 commits |
| yuliyan | 27 May 2025 to 27 Oct 2026, 22 commits |
| eason9487 | 25 Jun 2025 to 29 Sep 2026, 18 commits |
13 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- yesterday
- Releases, 24 months
- 102
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 14 |
|---|---|
| Q2 2024 | 11 |
| Q3 2024 | 15 |
| Q4 2024 | 15 |
| Q1 2025 | 11 |
| Q2 2025 | 11 |
| Q3 2025 | 13 |
| Q4 2025 | 11 |
| Q1 2026 | 13 |
| Q2 2026 | 16 |
| Q3 2026 | 14 |
| Q4 2026 | 5 |
Last release 3 Nov 2026. Tested with WordPress 7.1 (current).
Support
77% of 39 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 26 Oct 2026 | MailPoet – Newsletters, Email Marketing, and Automation < 5.14.2 - Reflected Cross-Site Scripting | 6.1 | < 5.14.2 | 5.14.2 | 0 |
| 21 Jul 2026 | MailPoet – Newsletters, Email Marketing, and Automation 5.30.0-5.33.0 - Cross-Site Request Forgery | 4.3 | 5.30.0 to 5.33.0 | 5.33.1 | 0 |
| 6 Mar 2025 | MailPoet <= 5.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 5.5.1 | 5.5.2 | 0 |
| 29 Oct 2024 | MailPoet <= 5.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 5.3.1 | 5.3.2 | 0 |
| 16 Apr 2019 | MailPoet – emails and newsletters in WordPress <= 3.23.1 - Reflected Cross-Site Scripting via URL parameter | 6.1 | < 3.23.2 | 3.23.2 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q1 2026 | 5.0 |
|---|---|
| Q2 2026 | 4.9 |
| Q3 2026 | 4.8 |
| Q4 2026 | 5.0 |
Average rating stayed at 5.0 between Q1 2026 and Q4 2026.
| 5 star | 1146 |
|---|---|
| 4 star | 76 |
| 3 star | 34 |
| 2 star | 30 |
| 1 star | 149 |
Momentum
500,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 31,386 |
|---|---|
| 11 May 2026 | 251,314 |
| 18 May 2026 | 233,920 |
| 25 May 2026 | 198,414 |
| 1 Jun 2026 | 192,876 |
| 8 Jun 2026 | 194,456 |
| 15 Jun 2026 | 193,377 |
| 22 Jun 2026 | 326,875 |
| 29 Jun 2026 | 200,841 |
| 6 Jul 2026 | 217,850 |
| 13 Jul 2026 | 217,272 |
| 20 Jul 2026 | 304,883 |
| 27 Jul 2026 | 197,944 |
| 3 Aug 2026 | 218,607 |
| 10 Aug 2026 | 213,205 |
| 17 Aug 2026 | 205,366 |
| 24 Aug 2026 | 183,572 |
| 31 Aug 2026 | 189,771 |
| 7 Sep 2026 | 187,009 |
| 14 Sep 2026 | 202,129 |
| 21 Sep 2026 | 213,266 |
| 28 Sep 2026 | 187,453 |
| 5 Oct 2026 | 208,083 |
| 12 Oct 2026 | 185,576 |
| 19 Oct 2026 | 196,536 |
| 26 Oct 2026 | 218,530 |
| 2 Nov 2026 | 8,386 |
Weekly downloads over the last 4 weeks are 24% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 5.45.0 |
|---|---|
| Author | MailPoet |
| Added | 28 Oct 2016 |
| Last updated | 3 Nov 2026 |
| Active installs | 500,000+ |
| Requires WordPress | 7.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Marketing & Advertising > Email Marketing & Campaigns |
| Tags | newsletter, Email Marketing, email automation, post notification, woocommerce emails |
Questions
Is MailPoet - Newsletters, Email Marketing, and Automation still maintained?
MailPoet - Newsletters, Email Marketing, and Automation was last updated on 3 Nov 2026. Its Canary status is Healthy.
Is MailPoet - Newsletters, Email Marketing, and Automation safe?
MailPoet - Newsletters, Email Marketing, and Automation has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns MailPoet - Newsletters, Email Marketing, and Automation?
The wordpress.org author is MailPoet. Recent committers: costasovo, yuliyan, paveldohnal, seuna8c, lysyjan87. We have recorded no ownership change.
What can I use instead of MailPoet - Newsletters, Email Marketing, and Automation?
We have no healthier plugin in the same category on record yet.