Does Fast ConvertKit have any unpatched vulnerabilities?

No. All known vulnerabilities in Fast ConvertKit have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Fast ConvertKit compatible with WordPress 6.3.8?

According to WordPress.org data, Fast ConvertKit 1.1.1 has been tested up to WordPress 6.3.8. Check the plugin's changelog for the latest compatibility information.

Is Fast ConvertKit compatible with PHP 7.4+?

Fast ConvertKit requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Fast ConvertKit updated?

Fast ConvertKit was last updated on Aug 9, 2023. Frequent updates are generally a positive security signal.

What is Fast ConvertKit's security score?

Fast ConvertKit has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Fast ConvertKit Security & Risk Analysis

wordpress.org/plugins/fast-convertkit

Easily Sync ConvertKit Contacts With Your WordPress Users.

50 active installs v1.1.1 PHP 7.4+ WP 4.0+ Updated Aug 9, 2023

convert-kitconvertkitemail-automationemail-marketingmarketing-automation

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Fast ConvertKit Safe to Use in 2026?

Generally Safe

Score 85/100

Fast ConvertKit has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago

Risk Assessment

The 'fast-convertkit' plugin v1.1.1 exhibits a mixed security posture. On the positive side, the plugin has no recorded vulnerabilities in its history, suggesting a generally stable development process. Furthermore, static analysis shows a clean bill of health regarding output escaping, file operations, and the absence of dangerous functions like `eval` or `system`. It also adheres to best practices by using prepared statements for the majority of its SQL queries.

Key Concerns

Dangerous function unserialize found
No nonce checks implemented
No capability checks implemented
Flow with unsanitized paths detected

Vulnerabilities

None known

Fast ConvertKit Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Fast ConvertKit Code Analysis

Dangerous Functions

Raw SQL Queries

8 prepared

Unescaped Output

4 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Dangerous Functions Found

unserialize$ck_options = empty( $ck_db->settings_data ) ? array() : unserialize( $ck_db->settings_data );fast-convertkit.php:50

unserialize$aroptions = unserialize($pdata->aroptions);fast-convertkit.php:151

unserialize$ck_options = empty( $ck_db->settings_data ) ? array() : unserialize( $ck_db->settings_data );fast-convertkit.php:158

unserialize$ck_options = empty( $ck_db->settings_data ) ? array() : unserialize( $ck_db->settings_data );fast-convertkit.php:446

SQL Query Safety

80% prepared10 total queries

Output Escaping

100% escaped4 total outputs

Data Flows

1 unsanitized

Data Flow Analysis

1 flows1 with unsanitized paths

<fast-convertkit> (fast-convertkit.php:0)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Fast ConvertKit Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 8

actionadmin_noticesfast-convertkit.php:30

filterff_settingsfast-convertkit.php:31

filterff_settings_datafast-convertkit.php:32

filterFM_AR_select_options_addonsfast-convertkit.php:33

filterFM_AR_options_HTML_addonsfast-convertkit.php:34

actionFM_add_to_AR_addonsfast-convertkit.php:35

actionFM_after_transaction_recordedfast-convertkit.php:36

actionFF_add_to_AR_addonsfast-convertkit.php:37

Maintenance & Trust

Fast ConvertKit Maintenance & Trust

Maintenance Signals

WordPress version tested6.3.8

Last updatedAug 9, 2023

PHP min version7.4

Downloads3K

Community Trust

Rating0/100

Number of ratings0

Active installs50

Alternatives

Fast ConvertKit Alternatives

CleverReach® WP

cleverreach-wp

Connect your WordPress account with our easy-to-use email software and increase the success of your website or blog with newsletter marketing!

4K 2 CVEs

Newsletter Sign-Up for CleverReach

cleverreach

100

Easily integrate a CleverReach Sign-Up form in your website. Supports widget, shortcode, comment integration and template function

2K No CVEs

Groundhogg — CRM, Newsletters, and Marketing Automation

groundhogg

Groundhogg is the best WordPress CRM & Marketing Automation plugin. Create flows, email campaigns, and have a CRM all within your WordPress site.

2K 23 CVEs

Official CleverReach® Plugin for WooCommerce

cleverreach-wc

Connect your WooCommerce store to our email software and say hello to successful and simple newsletter marketing – just like Spotify, Bugatti & DHL!

400 1 CVE

Fast MailerLite

fast-mailerlite

Easily Sync MailerLite Contacts With Your WordPress Users.

400 No CVEs

Developer Profile

Fast ConvertKit Developer Profile

fastflow

14 plugins · 940 total installs

trust score

Avg Security Score

87/100

Avg Patch Time

432 days

View full developer profile

Detection Fingerprints

How We Detect Fast ConvertKit

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/fast-convertkit/fast-convertkit-webhook.php

HTML / DOM Fingerprints

CSS Classes

arcontentbox

Data Attributes

id="fastflow_convertkit_apikey"name="fastflow_convertkit_apikey"id="fastflow_convertkit_secretkey"name="fastflow_convertkit_secretkey"id="convertkitid"name="convertkitid"

FAQ