Skip to content
PluginCanary

WP Subscribe

by MyThemeShop · 7,000+ active installs · Checked 3 Nov 2026
Avoid2 Criticals1 Warning

Avoid: vulnerability published 26 Jan 2026 still has no fix after 14 days.

39/ 100 Canary Score

Based on 3 of 5 areas

Capped at 39: a vulnerability has no patch.

Sub-scores for WP Subscribe
Ownership100
Maintenance0
Security35
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WP Subscribe still maintained?
No. Last release 10 May 2022, over 4 years ago. 10 May 2022 · wordpress.org
Who owns WP Subscribe, and has it changed hands?
No change recorded. 3 Nov 2026 · SVN log
Was WP Subscribe removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WP Subscribe safe?
No. 1 known vulnerability has no fix in the current version. 26 Jan 2026 · Wordfence Intelligence
Is the latest WP Subscribe update safe to install?
No ownership change before 1.2.16. No one-star spike after it. 10 May 2022 · Release history

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 26 Jan 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.9 Feb 2026Evidence
  • CriticalMNT-1No release in 54 months (last release 10 May 2022). Plan a replacement if the plugin is important to your site.10 May 2023Evidence
  • WarningMNT-2Tested up to WordPress 5.9.20, 12 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
MyThemeShop14 Oct 2014 to 10 May 2022, 62 commits

1 committer recorded. No ownership change since 2014.

Maintenance

Last release
4 years ago
Releases, 24 months
0
Tested up to
5.9 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for WP Subscribe
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 10 May 2022. Tested up to 5.9, 12 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 3.8.

Rating distribution
5 star16
4 star3
3 star0
2 star0
1 star7

Security record

1 vulnerability in 24 months (2 on record), 1 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
26 Jan 2026Subscribe <= 1.2.16 - Missing Authorization4.3<= 1.2.16No fixn/a
Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
2 May 2022WP Subscribe <= 1.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting5.5<= 1.2.121.2.131

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Subscribe
4 May 202620
11 May 202651
18 May 202648
25 May 202673
1 Jun 202659
8 Jun 202663
15 Jun 202647
22 Jun 202644
29 Jun 202650
6 Jul 202650
13 Jul 202673
20 Jul 202669
27 Jul 202678
3 Aug 202698
10 Aug 202669
17 Aug 202690
24 Aug 202672
31 Aug 202688
7 Sep 202684
14 Sep 202697
21 Sep 2026123
28 Sep 2026129
5 Oct 2026119
12 Oct 2026106
19 Oct 2026178
26 Oct 2026152
2 Nov 202624

Weekly downloads over the last 4 weeks are 44% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

KlaviyoScore 100 · 100,000+Mailjet Email MarketingScore 98 · 10,000+SureContactScore 97 · 10,000+Mailchimp List Subscribe FormScore 95 · 60,000+Kit (formerly ConvertKit)Score 95 · 40,000+

Facts

Version1.2.16
AuthorMyThemeShop
Added14 Oct 2014
Last updated10 May 2022
Active installs7,000+
Requires WordPress4.0
Tested up to5.9.20
Requires PHPnot stated
CategoryMarketing & Advertising > Email Marketing & Campaigns
Tagssubscribe, newsletter, subscription, subscribe widget, subscription Box

Other plugins by this author: WP Notification Bars, WP Tab Widget, WP Real Estate, MyThemeShop Theme Customizer, Avoid Duplicate Posts

Questions

Is WP Subscribe still maintained?

No. Last release 10 May 2022, over 4 years ago.

Who owns WP Subscribe, and has it changed hands?

No change recorded.

Was WP Subscribe removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WP Subscribe safe?

No. 1 known vulnerability has no fix in the current version.

Is the latest WP Subscribe update safe to install?

No ownership change before 1.2.16. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue