Skip to content
PluginCanary

Subscribe2 - Form, Email Subscribers & Newsletters

by weDevs · 10,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 17 Aug 2026, fixed in 10.48.

84/ 100 Canary Score
Sub-scores for Subscribe2 - Form, Email Subscribers & Newsletters
Ownership100
Maintenance100
Security70
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 17 Aug 2026, fixed in 10.48. Update to version 10.48 or later.17 Aug 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Collizo4sky3 Jan 2019 to 29 Feb 2020, 22 commits
tareq19884 Jun 2020 to 6 Jun 2024, 16 commits
wedevs20 Jan 2025 to 23 Sep 2026, 5 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
42 days ago
Releases, 24 months
5
Tested up to
7.0 vs 7.1
Requires PHP
5.4 supported 8.2+
Releases per quarter for Subscribe2 - Form, Email Subscribers & Newsletters
Q1 20240
Q2 20241
Q3 20240
Q4 20240
Q1 20251
Q2 20250
Q3 20250
Q4 20251
Q1 20260
Q2 20260
Q3 20263
Q4 20260

Last release 23 Sep 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
17 Aug 2026Subscribe2 – Form, Email Subscribers & Newsletters <= 10.47 - Unauthenticated Stored Cross-Site Scripting7.2<= 10.4710.4837
3 Aug 2026Subscribe2 <= 10.45 - Reflected Cross-Site Scripting6.1<= 10.4510.460
3 Feb 2026Subscribe2 <= 10.44 - Missing Authorization5.3<= 10.4410.450
18 Feb 2025Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter7.2<= 10.4310.440
11 Apr 2024Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout4.3<= 10.4210.4356
26 Jun 2023Subscribe2 <= 10.40 - Cross-Site Request Forgery4.3<= 10.4010.410
26 Jun 2023Subscribe2 <= 10.40 - Missing Authorization4.3<= 10.4010.410
22 Dec 2022Subscribe2 <= 10.37 - Cross-Site Request Forgery7.1<= 10.3710.380
16 Dec 2022Appsero <= 1.2.1 - Missing Authorization4.3<= 10.3710.386
14 Dec 2022Appsero <= 1.2.0 - Cross-Site Request Forgery4.3<= 10.3710.388
1 Oct 2014Subscribe2 – Form, Email Subscribers & Newsletters <= 10.15 - Stored Cross-Site Scripting6.1< 10.1610.160
1 Aug 2014Subscribe2 – Form, Email Subscribers & Newsletters < 8.1 - Multiple Cross-Site Scripting7.1< 8.18.10

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Subscribe2 - Form, Email Subscribers & Newsletters
Q2 20245.0
Q4 20251.0
Q2 20265.0

Average rating stayed at 5.0 between Q2 2024 and Q2 2026.

Rating distribution
5 star65
4 star7
3 star4
2 star2
1 star38
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Subscribe2 - Form, Email Subscribers & Newsletters
4 May 2026239
11 May 2026347
18 May 2026371
25 May 2026549
1 Jun 2026378
8 Jun 2026500
15 Jun 2026319
22 Jun 2026263
29 Jun 2026278
6 Jul 2026299
13 Jul 2026288
20 Jul 2026309
27 Jul 20266,501
3 Aug 20261,447
10 Aug 2026803
17 Aug 2026930
24 Aug 2026926
31 Aug 2026709
7 Sep 2026595
14 Sep 20266,809
21 Sep 20266,941
28 Sep 20261,300
5 Oct 20261,281
12 Oct 2026744
19 Oct 20261,559
26 Oct 2026714
2 Nov 2026167

Weekly downloads over the last 4 weeks are 40% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SureContact - Newsletters, Email Marketing, Automation, Revenue Tracking & CRMScore 93 · 10,000+Hostinger Reach - AI-Powered Email Marketing for WordPressScore 91 · 1,000,000+MailPoet - Newsletters, Email Marketing, and AutomationScore 91 · 500,000+KlaviyoScore 91 · 100,000+Newsletters, Email Marketing, SMS and Popups by OmnisendScore 91 · 100,000+

Facts

Version10.48
AuthorweDevs
Added16 Jun 2005
Last updated23 Sep 2026
Active installs10,000+
Requires WordPress4.7
Tested up to7.0.8
Requires PHP5.4
CategoryCommunication & Messaging > Transactional Email
Tagsemail, posts, notify, subscribe, subscription

Other plugins by this author: User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission, Conversion Tracking for WooCommerce, ReCaptcha Integration for WordPress, Texty - SMS Notification for WordPress, WooCommerce, Dokan and more, ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce, weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot, Project Manager - AI Powered Project Management, Task Management, Kanban Board & Time Tracker, wePOS - Point Of Sale (POS) for WooCommerce & Dokan, PDF invoice for WP ERP, StoreGrowth - Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce, Dokan Invoice, Dokan WPML

Questions

Is Subscribe2 - Form, Email Subscribers & Newsletters still maintained?

Subscribe2 - Form, Email Subscribers & Newsletters was last updated on 23 Sep 2026. Its Canary status is Healthy.

Is Subscribe2 - Form, Email Subscribers & Newsletters safe?

Subscribe2 - Form, Email Subscribers & Newsletters has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Subscribe2 - Form, Email Subscribers & Newsletters?

The wordpress.org author is weDevs. Recent committers: wedevs, tareq1988, Collizo4sky, tanaylakhani, MattyRob. We have recorded no ownership change.

What can I use instead of Subscribe2 - Form, Email Subscribers & Newsletters?

Plugins in the same category with a higher Canary Score: SureContact - Newsletters, Email Marketing, Automation, Revenue Tracking & CRM, Hostinger Reach - AI-Powered Email Marketing for WordPress, MailPoet - Newsletters, Email Marketing, and Automation, Klaviyo, Newsletters, Email Marketing, SMS and Popups by Omnisend.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue