Skip to content
PluginCanary

ShopMagic

ShopMagic - email automation for WordPress
by wpdesk · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 22 Oct 2026, 46 releases in 24 months, no unpatched vulnerabilities.

89/ 100 Canary Score
Sub-scores for ShopMagic
Ownership100
Maintenance100
Security70
SupportNo data
Reputation85

How the score works

Quick answers

Is ShopMagic still maintained?
Yes. Last release 22 Oct 2026, 46 releases in the last 24 months. 22 Oct 2026 · wordpress.org
Who owns ShopMagic, and has it changed hands?
No change recorded. Main committer wpdesk since Sep 2019. 4 Nov 2026 · SVN log
Was ShopMagic removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is ShopMagic safe?
4 known vulnerabilities, all fixed (latest in 4.9.2). Not on the exploited list. 22 Oct 2026 · Wordfence Intelligence
Is the latest ShopMagic update safe to install?
No ownership change before 4.9.3. No one-star spike after it. 22 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
handsomeapps3 Oct 2016 to 2 Aug 2019, 90 commits
wpdesk17 Sep 2019 to 22 Oct 2026, 396 commits

2 committers recorded. No ownership change since 2016.

Maintenance

Last release
13 days ago
Releases, 24 months
46
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for ShopMagic
Q1 20246
Q2 20246
Q3 202411
Q4 202410
Q1 20253
Q2 20255
Q3 20255
Q4 20257
Q1 20265
Q2 20263
Q3 20266
Q4 20264

Last release 22 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.6.

Average rating per quarter for ShopMagic
Q1 20243.7
Q2 20245.0
Q3 20243.0
Q1 20254.0
Q4 20255.0
Q2 20261.0
Q3 20265.0

Average rating rose from 3.7 to 5.0 between Q1 2024 and Q3 2026.

Rating distribution
5 star69
4 star2
3 star0
2 star2
1 star5
Latest low reviews

Security record

4 vulnerabilities in 24 months, all patched (latest fixed in 4.9.2).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
22 Oct 2026ShopMagic - email automation for WordPress <= 4.9.1 - Unauthenticated Information Exposure5.3<= 4.9.14.9.2Patched before disclosure
13 Oct 2026ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter8.1<= 4.9.04.9.1Patched before disclosure
7 Jan 2026ShopMagic <= 4.7.2 - Missing Authorization5.3<= 4.7.24.7.3Patched before disclosure
15 Oct 2025Free Follow-Up Emails & Marketing Automation for WooCommerce - ShopMagic <= 4.5.6 - Unauthenticated Information Exposure7.5<= 4.5.64.5.7Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for ShopMagic
4 May 2026338
11 May 2026968
18 May 20261,349
25 May 2026716
1 Jun 2026601
8 Jun 2026558
15 Jun 20265,156
22 Jun 20261,304
29 Jun 2026963
6 Jul 20265,885
13 Jul 20261,340
20 Jul 20265,360
27 Jul 20261,512
3 Aug 20265,921
10 Aug 20261,558
17 Aug 202610,026
24 Aug 20261,539
31 Aug 20261,129
7 Sep 20264,935
14 Sep 20262,152
21 Sep 20261,287
28 Sep 20261,011
5 Oct 2026823
12 Oct 20266,274
19 Oct 202610,370
26 Oct 20262,582
2 Nov 2026234

Weekly downloads over the last 4 weeks are 73% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

KlaviyoScore 100 · 100,000+Mailjet Email MarketingScore 98 · 10,000+SureContactScore 97 · 10,000+Mailchimp List Subscribe FormScore 95 · 60,000+Kit (formerly ConvertKit)Score 95 · 40,000+

Facts

Version4.9.3
Authorwpdesk
Added3 Oct 2016
Last updated22 Oct 2026
Active installs10,000+
Requires WordPress6.4
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsfollow up emails, woocommerce mailchimp, woocommerce abandoned cart, customize woocommerce emails, woocommerce email customizer

Other plugins by this author: Flexible Checkout Fields for WooCommerce - WooCommerce Checkout Manager, Flexible Product Fields (WooCommerce Product Addons) - WooCommerce Product Page Editor, Flexible PDF Invoices for WooCommerce & WordPress, Flexible Cookies, Custom Price for WooCommerce, Flexible Refund for WooCommerce - EU One Click Return, Flexible PDF Coupons - Gift Cards & Vouchers for WooCommerce, Flexible Quantity & Price Calculator for WooCommerce, ShopMagic Abandoned Cart Recovery for WooCommerce, Flexible Subscriptions, Autopay dla WooCommerce, Checkout Fields for Blocks

Questions

Is ShopMagic still maintained?

Yes. Last release 22 Oct 2026, 46 releases in the last 24 months.

Who owns ShopMagic, and has it changed hands?

No change recorded. Main committer wpdesk since Sep 2019.

Was ShopMagic removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is ShopMagic safe?

4 known vulnerabilities, all fixed (latest in 4.9.2). Not on the exploited list.

Is the latest ShopMagic update safe to install?

No ownership change before 4.9.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue