MailBluster for WordPress Security & Risk Analysis

wordpress.org/plugins/mailbluster4wp

A free and simple WordPress plugin for MailBluster which provides different methods to create and include subscription forms into WordPress pages or p …

100 active installs v2.2.4 PHP 5.6+ WP 3.0.1+ Updated Jun 4, 2025
amazonsesbulk-emailemail-marketingnewsletter
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is MailBluster for WordPress Safe to Use in 2026?

Generally Safe

Score 100/100

MailBluster for WordPress has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

The mailbluster4wp plugin, version 2.2.4, presents a mixed security posture. On the positive side, it demonstrates strong practices regarding SQL queries, utilizing prepared statements exclusively, and does not appear to have a history of known vulnerabilities, which is a significant strength. The absence of dangerous functions and file operations further bolsters its perceived security. However, the plugin has a concerningly high number of unprotected entry points. With 3 out of 4 identified entry points (AJAX handlers) lacking authentication checks, there's a significant risk of unauthorized access and execution of plugin functionalities.

Key Concerns

  • Unprotected AJAX handlers
  • Unescaped output percentage is low
  • Taint analysis: flows with unsanitized paths
Vulnerabilities
None known

MailBluster for WordPress Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

MailBluster for WordPress Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
43
121 escaped
Nonce Checks
3
Capability Checks
0
File Operations
0
External Requests
4
Bundled Libraries
0

Output Escaping

74% escaped164 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

5 flows1 with unsanitized paths
mb4wp_admin_notice_dialog (admin\class-mailbluster4wp-admin.php:684)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
3 unprotected

MailBluster for WordPress Attack Surface

Entry Points4
Unprotected3

AJAX Handlers 3

authwp_ajax_mb4wp_dialog_form_processincludes\class-mailbluster4wp.php:215
authwp_ajax_mb4wp_form_processincludes\class-mailbluster4wp.php:233
noprivwp_ajax_mb4wp_form_processincludes\class-mailbluster4wp.php:234

Shortcodes 1

[mailbluster_form] includes\class-mailbluster4wp.php:236
WordPress Hooks 22
actionplugins_loadedincludes\class-mailbluster4wp.php:171
actioninitincludes\class-mailbluster4wp.php:187
actioninitincludes\class-mailbluster4wp.php:188
actionwidgets_initincludes\class-mailbluster4wp.php:189
actionedit_form_after_titleincludes\class-mailbluster4wp.php:192
actionadmin_footerincludes\class-mailbluster4wp.php:193
actionadmin_enqueue_scriptsincludes\class-mailbluster4wp.php:195
actionadmin_enqueue_scriptsincludes\class-mailbluster4wp.php:196
actionadmin_enqueue_scriptsincludes\class-mailbluster4wp.php:197
actionadmin_menuincludes\class-mailbluster4wp.php:198
actionadmin_menuincludes\class-mailbluster4wp.php:199
actionadmin_initincludes\class-mailbluster4wp.php:200
actionupdate_option_mb4wp_api_optionsincludes\class-mailbluster4wp.php:202
actionadmin_initincludes\class-mailbluster4wp.php:203
actionadmin_noticesincludes\class-mailbluster4wp.php:204
actionadmin_noticesincludes\class-mailbluster4wp.php:205
actionadmin_initincludes\class-mailbluster4wp.php:206
filterpost_row_actionsincludes\class-mailbluster4wp.php:211
filterpost_updated_messagesincludes\class-mailbluster4wp.php:213
actionadmin_noticesincludes\class-mailbluster4wp.php:216
actionwp_enqueue_scriptsincludes\class-mailbluster4wp.php:231
actionwp_enqueue_scriptsincludes\class-mailbluster4wp.php:232
Maintenance & Trust

MailBluster for WordPress Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJun 4, 2025
PHP min version5.6
Downloads6K

Community Trust

Rating80/100
Number of ratings2
Active installs100
Developer Profile

MailBluster for WordPress Developer Profile

MailBluster

1 plugin · 100 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect MailBluster for WordPress

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mailbluster4wp/css/mailbluster4wp-admin.css/wp-content/plugins/mailbluster4wp/js/mailbluster4wp-admin.js/wp-content/plugins/mailbluster4wp/js/mailbluster4wp-form-builder.js
Script Paths
/wp-content/plugins/mailbluster4wp/js/mailbluster4wp-admin.js/wp-content/plugins/mailbluster4wp/js/mailbluster4wp-form-builder.js
Version Parameters
mailbluster4wp-admin.css?ver=mailbluster4wp-admin.js?ver=mailbluster4wp-form-builder.js?ver=

HTML / DOM Fingerprints

Data Attributes
data-mb4wp-dialog-form
JS Globals
mb4wpAjaxDialogForm
REST Endpoints
/wp-json/mb4wp/v1/dialog-form
FAQ

Frequently Asked Questions about MailBluster for WordPress