Skip to content
PluginCanary
Limited data: this plugin has under 1,000 active installs and less than 12 weeks of history with us, so we show signals but no status band yet.

WP Mailster

by brandtoss · 300+ active installs · Checked 3 Nov 2026
Limited data

Limited data: WP Mailster has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.

86/ 100 Canary Score
Sub-scores for WP Mailster
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WP Mailster still maintained?
Yes. Last release 18 Oct 2026, 10 releases in the last 24 months. 18 Oct 2026 · wordpress.org
Who owns WP Mailster, and has it changed hands?
No change recorded. Main committer brandtoss since Jan 2017. 3 Nov 2026 · SVN log
Was WP Mailster removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WP Mailster safe?
18 known vulnerabilities, all fixed (latest in 1.9.2.0). Not on the exploited list. 20 Oct 2026 · Wordfence Intelligence
Is the latest WP Mailster update safe to install?
No ownership change before 1.9.2.0. No one-star spike after it. 18 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
brandtoss3 Jan 2017 to 18 Oct 2026, 184 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
17 days ago
Releases, 24 months
10
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for WP Mailster
Q1 20241
Q2 20241
Q3 20240
Q4 20245
Q1 20252
Q2 20250
Q3 20251
Q4 20250
Q1 20261
Q2 20260
Q3 20261
Q4 20262

Last release 18 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.9.

Rating distribution
5 star31
4 star0
3 star0
2 star0
1 star1

Security record

17 vulnerabilities in 24 months (18 on record), all patched (latest fixed in 1.9.2.0).

Show 18 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
20 Oct 2026WP Mailster <= 1.9.1.0 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.9.1.01.9.2.0Patched before disclosure
19 Oct 2026WP Mailster <= 1.9.1.0 - Unauthenticated Arbitrary File Upload9.8<= 1.9.1.01.9.2.0Patched before disclosure
19 Oct 2026WP Mailster <= 1.9.1.0 - Authenticated (Contributor+) Local File Inclusion7.5<= 1.9.1.01.9.2.0Patched before disclosure
5 Oct 2026WP Mailster <= 1.9.0.0 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.9.0.01.9.1.0n/a
5 Oct 2026WP Mailster <= 1.9.0.0 - Missing Authorization4.3<= 1.9.0.01.9.1.0n/a
28 Jan 2025WP Mailster <= 1.8.20.0 - Reflected Cross-Site Scripting6.1<= 1.8.20.01.8.21.0n/a
6 Jan 2025WP Mailster <= 1.8.17.0 - Unauthenticated Sensitive Information Exposure5.3<= 1.8.17.01.8.18.0n/a
22 Dec 2024WP Mailster <= 1.8.17.0 - Reflected Cross-Site Scripting6.1<= 1.8.17.01.8.18.0n/a
11 Dec 2024WP Mailster <= 1.8.17.0 - Cross-Site Request Forgery4.3<= 1.8.17.01.8.18.0n/a
7 Dec 2024WP Mailster <= 1.8.16.0 - Unauthenticated Sensitive Information Exposure5.3<= 1.8.16.01.8.17.0n/a
2 Dec 2024WP Mailster <= 1.8.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.8.17.01.8.18.0n/a
2 Dec 2024WP Mailster <= 1.8.16.0 - Missing Authorization6.5<= 1.8.16.01.8.17.0n/a
2 Dec 2024WP Mailster <= 1.8.16.0 - Missing Authorization7.5<= 1.8.16.01.8.17.0n/a
2 Dec 2024WP Mailster <= 1.8.16.0 - Authenticated (Contributor+) SQL Injection via orderby8.8<= 1.8.16.01.8.17.0n/a
2 Dec 2024WP Mailster <= 1.8.16.0 - Unauthenticated Information Exposure5.3<= 1.8.16.01.8.17.0n/a
23 Nov 2024WP Mailster <= 1.8.16.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.8.16.01.8.17.0n/a
23 Nov 2024WP Mailster <= 1.8.15.0 - Reflected Cross-Site Scripting6.1<= 1.8.15.01.8.16.0n/a
5 Dec 2017WP Mailster < 1.5.5 - Cross-Site Scripting6.1< 1.5.51.5.5n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

300+ active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version1.9.2.0
Authorbrandtoss
Added1 Jan 2017
Last updated18 Oct 2026
Active installs300+
Requires WordPress5.3
Tested up to7.1.4
Requires PHP7.4
Categorynot stated
Tagsmailman, listserv, group email, mailing list, discussion list

Other plugins by this author: WP Admin Audit

Questions

Is WP Mailster still maintained?

Yes. Last release 18 Oct 2026, 10 releases in the last 24 months.

Who owns WP Mailster, and has it changed hands?

No change recorded. Main committer brandtoss since Jan 2017.

Was WP Mailster removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WP Mailster safe?

18 known vulnerabilities, all fixed (latest in 1.9.2.0). Not on the exploited list.

Is the latest WP Mailster update safe to install?

No ownership change before 1.9.2.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue