Skip to content
PluginCanary

MailerLite

MailerLite - Signup forms (official)
by MailerLite · 100,000+ active installs · Checked 4 Nov 2026
Healthy1 Warning

Healthy: maintained, last release 27 Oct 2026, 14 releases in 24 months, no unpatched vulnerabilities.

Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.

87/ 100 Canary Score
Sub-scores for MailerLite
Ownership100
Maintenance90
Security85
SupportNo data
Reputation70

How the score works

Quick answers

Is MailerLite still maintained?
Yes. Last release 27 Oct 2026, 14 releases in the last 24 months. 27 Oct 2026 · wordpress.org
Who owns MailerLite, and has it changed hands?
No change recorded. Main committer mailerlite since Aug 2014. 4 Nov 2026 · SVN log
Was MailerLite removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is MailerLite safe?
9 known vulnerabilities, all fixed (latest in 1.7.22). Not on the exploited list. 23 Sep 2026 · Wordfence Intelligence
Is the latest MailerLite update safe to install?
No ownership change before 1.7.27. No one-star spike after it. 27 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mailerlite3 Aug 2014 to 27 Oct 2026, 251 commits

1 committer recorded. No ownership change since 2014.

Maintenance

Last release
8 days ago
Releases, 24 months
14
Tested up to
6.8 vs 7.1
Requires PHP
7.2.5 supported 8.2+
Releases per quarter
Releases per quarter for MailerLite
Q1 20244
Q2 20245
Q3 20242
Q4 20240
Q1 20250
Q2 20250
Q3 20251
Q4 20254
Q1 20262
Q2 20266
Q3 20260
Q4 20261

Last release 27 Oct 2026. Tested up to 6.8, 3 major versions behind WordPress 7.1.

Reputation

Last 90 days: 1.0 (2 reviews). Lifetime: 2.9.

Average rating per quarter for MailerLite
Q3 20241.0
Q1 20251.0
Q2 20251.0
Q4 20255.0
Q1 20261.7
Q4 20261.0

Average rating stayed at 1.0 between Q3 2024 and Q4 2026.

Rating distribution
5 star14
4 star4
3 star3
2 star4
1 star17
Latest low reviews

Security record

3 vulnerabilities in 24 months (9 on record), all patched (latest fixed in 1.7.22).

Show 9 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
23 Sep 2026MailerLite - Signup forms (official) <= 1.7.21 - Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion4.3<= 1.7.211.7.22Patched before disclosure
28 Jan 2026MailerLite - Signup forms (official) <= 1.7.18 - Missing Authorization4.3<= 1.7.181.7.1921
11 Dec 2025MailerLite - Signup forms (official) <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5<= 1.7.161.7.17Patched before disclosure
29 Apr 2024MailerLite - Signup forms (official) 1.5.0 - 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.41.5.0 to 1.7.61.7.7Patched before disclosure
29 Apr 2024MailerLite - Signup forms (official) <= 1.7.6 - Missing Authorization5.3<= 1.7.61.7.7Patched before disclosure
1 Aug 2022MailerLite - Signup forms (official) <= 1.5.7 - Cross-Site Request Forgery8.8<= 1.5.71.5.8Patched before disclosure
18 May 2022MailerLite - Signup forms <= 1.5.3 - Reflected Cross-Site Scripting6.1<= 1.5.31.5.4Patched before disclosure
22 May 2020MailerLite Signup Forms < 1.4.4 - Unauthenticated SQL Injection9.8< 1.4.41.4.4Patched before disclosure
22 May 2020MailerLite - Signup forms <= 1.4.4 - Cross-Site Request Forgery5.4< 1.4.51.4.54

Changelog mentions of security fixes: 1.7.24 (security); 1.7.25 (security); 1.7.26 (security); 1.7.27 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for MailerLite
4 May 20266,145
11 May 20267,625
18 May 202610,073
25 May 20264,723
1 Jun 20263,654
8 Jun 202637,499
15 Jun 202644,834
22 Jun 202645,146
29 Jun 202611,739
6 Jul 202611,202
13 Jul 20264,523
20 Jul 20264,110
27 Jul 20263,427
3 Aug 20263,085
10 Aug 20262,671
17 Aug 20262,534
24 Aug 20263,044
31 Aug 20262,899
7 Sep 20262,266
14 Sep 20262,263
21 Sep 20262,269
28 Sep 20262,196
5 Oct 20262,499
12 Oct 20262,208
19 Oct 20263,246
26 Oct 202651,167
2 Nov 20261,820

Weekly downloads over the last 4 weeks are 41% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

KlaviyoScore 100 · 100,000+Mailjet Email MarketingScore 98 · 10,000+SureContactScore 97 · 10,000+Mailchimp List Subscribe FormScore 95 · 60,000+Kit (formerly ConvertKit)Score 95 · 40,000+

Facts

Version1.7.27
AuthorMailerLite
Added3 Aug 2014
Last updated27 Oct 2026
Active installs100,000+
Requires WordPress3.0.1
Tested up to6.8.12
Requires PHP7.2.5
CategoryForms & Data Collection > Form Builders & Creators
Tagsform, webform, subscribe, mailerlite, newsletter

Other plugins by this author: MailerLite - WooCommerce integration, Featured Image in RSS Feed by MailerLite

Questions

Is MailerLite still maintained?

Yes. Last release 27 Oct 2026, 14 releases in the last 24 months.

Who owns MailerLite, and has it changed hands?

No change recorded. Main committer mailerlite since Aug 2014.

Was MailerLite removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is MailerLite safe?

9 known vulnerabilities, all fixed (latest in 1.7.22). Not on the exploited list.

Is the latest MailerLite update safe to install?

No ownership change before 1.7.27. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue