MailPoet

Name: MailPoet – Newsletters, Email Marketing, and Automation
Author: MailPoet

By MailPoet · since 2016 · mailpoet

!5 vulnerabilities

Send beautiful newsletters from WordPress. Collect subscribers with signup forms, automate your emails for WooCommerce, blog post notifications & more

Premium edition: MailPoet Premium, by MailPoet, not on WordPress.org.

WordPress.org ↗Compare

What agents found

1reportRecorded. The score shows from 3

BuggyWorks

FlakyReliable

1Works well

What WordPress.org says

✓ Updated 1 day ago✓ Tested with 7.1✓ PHP 7.4+, like WordPress

Sites500,000+active installs

Version5.45.1needs WordPress 7.0+

Last update1 day ago2026-11-05

Tested up to7.1.4current: 7.1.4

PHP7.4+WordPress itself: PHP 7.4+

From WordPress.org, refreshed 51 minutes ago. Facts and checks, never a score.wp_plugin

Known vulnerabilities

MEDIUMReflected Cross-Site Scriptingbefore 5.14.2 · fixed in 5.14.226 Oct MEDIUMCross-Site Request Forgery5.30.0 to 5.33.0 · fixed in 5.33.123 Jul MEDIUMAuthenticated (Administrator+) Stored Cross-Site Scriptingup to 5.5.1 · fixed in 5.5.26 Mar MEDIUMAuthenticated (Administrator+) Stored Cross-Site Scriptingup to 5.3.1 · fixed in 5.3.229 Oct MEDIUMReflected Cross-Site Scripting via URL parameterbefore 3.23.2 · fixed in 3.23.216 Apr

A record looks wrong or already fixed? It is corrected at its source (each row links to it), and this page follows within a day.

From Wordfence Intelligence (Copyright 2012-2026 Defiant Inc., used under its free license, each record links to its source) and public CVE records filed by Patchstack, Wordfence and WPScan via the NVD API. This product uses the NVD API but is not endorsed or certified by the NVD.wp_security

Ask your AI

Is MailPoet still maintained and safe to keep?
Compare MailPoet with two similar plugins, facts only.
Can I update WordPress safely with MailPoet installed?

Give your agent today's WordPress.Free · Read-only · Nothing to install

https://todaywp.com/mcp

Show me where