WP Subscribe
Avoid: vulnerability published 26 Jan 2026 still has no fix after 14 days.
Based on 3 of 5 areas
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is WP Subscribe still maintained?
- No. Last release 10 May 2022, over 4 years ago. 10 May 2022 · wordpress.org
- Who owns WP Subscribe, and has it changed hands?
- No change recorded. 3 Nov 2026 · SVN log
- Was WP Subscribe removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is WP Subscribe safe?
- No. 1 known vulnerability has no fix in the current version. 26 Jan 2026 · Wordfence Intelligence
- Is the latest WP Subscribe update safe to install?
- No ownership change before 1.2.16. No one-star spike after it. 10 May 2022 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 26 Jan 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.9 Feb 2026Evidence
- CriticalMNT-1No release in 54 months (last release 10 May 2022). Plan a replacement if the plugin is important to your site.10 May 2023Evidence
- WarningMNT-2Tested up to WordPress 5.9.20, 12 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| MyThemeShop | 14 Oct 2014 to 10 May 2022, 62 commits |
|---|
1 committer recorded. No ownership change since 2014.
Maintenance
- Last release
- 4 years ago
- Releases, 24 months
- 0
- Tested up to
- 5.9 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 10 May 2022. Tested up to 5.9, 12 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 3.8.
| 5 star | 16 |
|---|---|
| 4 star | 3 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 7 |
Security record
1 vulnerability in 24 months (2 on record), 1 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 26 Jan 2026 | Subscribe <= 1.2.16 - Missing Authorization | 4.3 | <= 1.2.16 | No fix | n/a |
Show 1 patched vulnerability
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 2 May 2022 | WP Subscribe <= 1.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting | 5.5 | <= 1.2.12 | 1.2.13 | 1 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
7,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 20 |
|---|---|
| 11 May 2026 | 51 |
| 18 May 2026 | 48 |
| 25 May 2026 | 73 |
| 1 Jun 2026 | 59 |
| 8 Jun 2026 | 63 |
| 15 Jun 2026 | 47 |
| 22 Jun 2026 | 44 |
| 29 Jun 2026 | 50 |
| 6 Jul 2026 | 50 |
| 13 Jul 2026 | 73 |
| 20 Jul 2026 | 69 |
| 27 Jul 2026 | 78 |
| 3 Aug 2026 | 98 |
| 10 Aug 2026 | 69 |
| 17 Aug 2026 | 90 |
| 24 Aug 2026 | 72 |
| 31 Aug 2026 | 88 |
| 7 Sep 2026 | 84 |
| 14 Sep 2026 | 97 |
| 21 Sep 2026 | 123 |
| 28 Sep 2026 | 129 |
| 5 Oct 2026 | 119 |
| 12 Oct 2026 | 106 |
| 19 Oct 2026 | 178 |
| 26 Oct 2026 | 152 |
| 2 Nov 2026 | 24 |
Weekly downloads over the last 4 weeks are 44% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 1.2.16 |
|---|---|
| Author | MyThemeShop |
| Added | 14 Oct 2014 |
| Last updated | 10 May 2022 |
| Active installs | 7,000+ |
| Requires WordPress | 4.0 |
| Tested up to | 5.9.20 |
| Requires PHP | not stated |
| Category | Marketing & Advertising > Email Marketing & Campaigns |
| Tags | subscribe, newsletter, subscription, subscribe widget, subscription Box |
Other plugins by this author: WP Notification Bars, WP Tab Widget, WP Real Estate, MyThemeShop Theme Customizer, Avoid Duplicate Posts
Questions
Is WP Subscribe still maintained?
No. Last release 10 May 2022, over 4 years ago.
Who owns WP Subscribe, and has it changed hands?
No change recorded.
Was WP Subscribe removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is WP Subscribe safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest WP Subscribe update safe to install?
No ownership change before 1.2.16. No one-star spike after it.