Skip to content
PluginCanary

Mailster WordPress Newsletter Plugin

by EverPress · 7,000+ active installs · Checked 3 Nov 2026
Avoid5 Criticals

Avoid: vulnerability published 22 Jul 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39: a vulnerability has no patch.

Sub-scores for Mailster WordPress Newsletter Plugin
Ownership100
Maintenance100
Security25
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Mailster WordPress Newsletter Plugin still maintained?
Yes. Last release 15 Oct 2026, 1 release in the last 24 months. 15 Oct 2026 · wordpress.org
Who owns Mailster WordPress Newsletter Plugin, and has it changed hands?
No change recorded. Main committer everpress since Feb 2017. 3 Nov 2026 · SVN log
Was Mailster WordPress Newsletter Plugin removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Mailster WordPress Newsletter Plugin safe?
No. 5 known vulnerabilities have no fix in the current version. 22 Jul 2026 · Wordfence Intelligence
Is the latest Mailster WordPress Newsletter Plugin update safe to install?
No ownership change before 2.0.3. No one-star spike after it. 15 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 22 Jul 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.5 Aug 2026Evidence
  • CriticalSEC-2Vulnerability published 27 Oct 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.10 Nov 2025Evidence
  • CriticalSEC-2Vulnerability published 28 Jun 2024 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.12 Jul 2024Evidence
  • CriticalSEC-2Vulnerability published 15 Apr 2024 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.29 Apr 2024Evidence
  • CriticalSEC-2Vulnerability published 14 Oct 2020 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.28 Oct 2020Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
everpress22 Feb 2017 to 15 Oct 2026, 71 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
20 days ago
Releases, 24 months
1
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Mailster WordPress Newsletter Plugin
Q1 20240
Q2 20242
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20261

Last release 15 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.5.

Rating distribution
5 star5
4 star0
3 star0
2 star0
1 star3

Security record

2 vulnerabilities in 24 months (6 on record), 5 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
22 Jul 2026Mailster - Email Newsletter Plugin for WordPress <= 4.1.17 - Authenticated (Editor+) Arbitrary File Upload7.2<= 4.1.17No fixn/a
27 Oct 2025Mailster < 4.1.14 - Reflected Cross-Site Scripting6.1< 4.1.14No fixn/a
28 Jun 2024Mailster <= 4.0.9 - Reflected Cross-Site Scripting6.1<= 4.0.9No fixn/a
15 Apr 2024Mailster <= 4.0.6 - Unauthenticated Local File Inclusion9.8<= 4.0.6No fixn/a
14 Oct 2020Mailster <= 2.4.5.1 - Stored Cross-Site Scripting7.2<= 2.4.5.1No fixn/a
Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
28 Mar 2024Mailster <= 1.0.3 - Reflected Cross-Site Scripting6.1<= 1.0.32.0.0Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Mailster WordPress Newsletter Plugin
4 May 202659
11 May 202699
18 May 2026101
25 May 2026113
1 Jun 202697
8 Jun 2026135
15 Jun 2026104
22 Jun 202685
29 Jun 202685
6 Jul 202696
13 Jul 2026108
20 Jul 2026118
27 Jul 2026148
3 Aug 2026165
10 Aug 2026138
17 Aug 2026135
24 Aug 2026126
31 Aug 2026131
7 Sep 2026150
14 Sep 2026169
21 Sep 2026175
28 Sep 2026192
5 Oct 2026187
12 Oct 2026451
19 Oct 2026295
26 Oct 2026268
2 Nov 202650

Weekly downloads over the last 4 weeks are 80% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

KlaviyoScore 100 · 100,000+Mailjet Email MarketingScore 98 · 10,000+SureContactScore 97 · 10,000+Mailchimp List Subscribe FormScore 95 · 60,000+Kit (formerly ConvertKit)Score 95 · 40,000+

Facts

Version2.0.3
AuthorEverPress
Added13 Jan 2017
Last updated15 Oct 2026
Active installs7,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryMarketing & Advertising > Email Marketing & Campaigns
Tagsnewsletters, email signup, Email Marketing, email newsletter, newsletter signup

Other plugins by this author: Local Google Fonts, Mailster for WooCommerce, Mailster AmazonSES Integration, Mailster reCaptcha, Mailster Gmail Integration, Mailster SendGrid Integration, Mailster Contact Form 7, Mailster Google Analytics, Mailster Gravity Forms, Mailster Live, Mailster Cool Captcha, Mailster Mailgun Integration

Questions

Is Mailster WordPress Newsletter Plugin still maintained?

Yes. Last release 15 Oct 2026, 1 release in the last 24 months.

Who owns Mailster WordPress Newsletter Plugin, and has it changed hands?

No change recorded. Main committer everpress since Feb 2017.

Was Mailster WordPress Newsletter Plugin removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Mailster WordPress Newsletter Plugin safe?

No. 5 known vulnerabilities have no fix in the current version.

Is the latest Mailster WordPress Newsletter Plugin update safe to install?

No ownership change before 2.0.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue