Noptin - Newsletter, New Post Notifications & Email Automation
Healthy: vulnerability published 9 Oct 2026, fixed in 4.4.0.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 4.4.0. Update to version 4.4.0 or later.9 Oct 2026Evidence
- WarningSEC-1Vulnerability published 26 Aug 2026, fixed in 4.3.3. Update to version 4.3.3 or later.26 Aug 2026Evidence
- InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 5 Mar 2019 to 5 Mar 2019, 1 commits |
|---|---|
| picocodes | 6 Mar 2019 to 4 Nov 2026, 212 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 7 days ago
- Releases, 24 months
- 71
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 11 |
|---|---|
| Q2 2024 | 10 |
| Q3 2024 | 13 |
| Q4 2024 | 11 |
| Q1 2025 | 12 |
| Q2 2025 | 9 |
| Q3 2025 | 5 |
| Q4 2025 | 10 |
| Q1 2026 | 8 |
| Q2 2026 | 6 |
| Q3 2026 | 10 |
| Q4 2026 | 4 |
Last release 28 Oct 2026. Tested with WordPress 7.1 (current).
Support
100% of 4 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 9 Oct 2026 | Simple Newsletter Plugin <= 4.3.10 - Unauthenticated Stored Cross-Site Scripting via Subscriber Custom Field via Manage Preferences Form + Campaign Preview noptin_key Pivot | 5.4 | <= 4.3.10 | 4.4.0 | 0 |
| 26 Aug 2026 | Simple Newsletter Plugin – Noptin < 4.3.3 - Missing Authorization | 5.3 | < 4.3.3 | 4.3.3 | 0 |
| 12 Jun 2025 | Noptin <= 3.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting | 4.4 | <= 3.8.7 | 4.0.0 | 0 |
| 1 Jul 2024 | Noptin <= 3.4.2 - Missing Authorization to Unauthenticated Form Submission | 5.3 | <= 3.4.2 | 3.4.3 | 0 |
| 27 Jan 2023 | Simple Newsletter Plugin – Noptin <= 1.10.3 - Unauthenticated CSV Injection | 7.2 | <= 1.10.3 | 1.11.0 | 0 |
| 17 Jan 2022 | WordPress Newsletter Plugin – Noptin < 1.6.5 - Open Redirect | 6.1 | < 1.6.5 | 1.6.5 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q1 2025 | 5.0 |
|---|---|
| Q2 2025 | 5.0 |
| Q3 2025 | 4.8 |
| Q4 2025 | 4.3 |
| Q1 2026 | 4.3 |
| Q2 2026 | 5.0 |
| Q3 2026 | 3.7 |
| Q4 2026 | 5.0 |
Average rating stayed at 5.0 between Q1 2025 and Q4 2026.
| 5 star | 98 |
|---|---|
| 4 star | 6 |
| 3 star | 5 |
| 2 star | 0 |
| 1 star | 11 |
- Every feature is paywalled · 1 star · 23 Aug 2026
- Design it in the backend, looks completely different in front · 1 star · 23 Mar 2026
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 477 |
|---|---|
| 11 May 2026 | 4,662 |
| 18 May 2026 | 1,818 |
| 25 May 2026 | 787 |
| 1 Jun 2026 | 5,147 |
| 8 Jun 2026 | 953 |
| 15 Jun 2026 | 690 |
| 22 Jun 2026 | 539 |
| 29 Jun 2026 | 517 |
| 6 Jul 2026 | 5,185 |
| 13 Jul 2026 | 5,549 |
| 20 Jul 2026 | 4,853 |
| 27 Jul 2026 | 5,459 |
| 3 Aug 2026 | 5,703 |
| 10 Aug 2026 | 1,027 |
| 17 Aug 2026 | 5,438 |
| 24 Aug 2026 | 1,798 |
| 31 Aug 2026 | 954 |
| 7 Sep 2026 | 9,375 |
| 14 Sep 2026 | 8,217 |
| 21 Sep 2026 | 3,379 |
| 28 Sep 2026 | 978 |
| 5 Oct 2026 | 6,141 |
| 12 Oct 2026 | 1,155 |
| 19 Oct 2026 | 9,707 |
| 26 Oct 2026 | 6,188 |
| 2 Nov 2026 | 316 |
Weekly downloads over the last 4 weeks are 21% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 4.4.3 |
|---|---|
| Author | Noptin Newsletter Team |
| Added | 6 Mar 2019 |
| Last updated | 28 Oct 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 6.7 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | notify, subscribe, newsletter, woocommerce, newsletter subscribers |
Other plugins by this author: Hizzle CAPTCHA - Protect your forms from spam, Email Customizer, Simple Download Manager - Hizzle Downloads, Hubaga - Sell Digital Downloads
Questions
Is Noptin - Newsletter, New Post Notifications & Email Automation still maintained?
Noptin - Newsletter, New Post Notifications & Email Automation was last updated on 28 Oct 2026. Its Canary status is Healthy.
Is Noptin - Newsletter, New Post Notifications & Email Automation safe?
Noptin - Newsletter, New Post Notifications & Email Automation has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Noptin - Newsletter, New Post Notifications & Email Automation?
The wordpress.org author is Noptin Newsletter Team. Recent committers: picocodes, plugin-master. We have recorded no ownership change.
What can I use instead of Noptin - Newsletter, New Post Notifications & Email Automation?
Plugins in the same category with a higher Canary Score: SureContact - Newsletters, Email Marketing, Automation, Revenue Tracking & CRM, Hostinger Reach - AI-Powered Email Marketing for WordPress, MailPoet - Newsletters, Email Marketing, and Automation, Klaviyo, Newsletters, Email Marketing, SMS and Popups by Omnisend.