MailPoet – Newsletters, Email Marketing, and Automation Security & Risk Analysis

wordpress.org/plugins/mailpoet

Send beautiful newsletters from WordPress. Collect subscribers with signup forms, automate your emails for WooCommerce, blog post notifications & more

500K active installs v5.22.1 PHP 7.4+ WP 6.8+ Updated Mar 10, 2026
email-automationemail-marketingnewsletterpost-notificationwoocommerce-emails
98
A · Safe
CVEs total3
Unpatched0
Last CVEMar 6, 2025
Safety Verdict

Is MailPoet – Newsletters, Email Marketing, and Automation Safe to Use in 2026?

Generally Safe

Score 98/100

MailPoet – Newsletters, Email Marketing, and Automation has a strong security track record. Known vulnerabilities have been patched promptly.

3 known CVEsLast CVE: Mar 6, 2025Updated 24d ago
Risk Assessment
Assessment pending
Vulnerabilities
3

MailPoet – Newsletters, Email Marketing, and Automation Security Vulnerabilities

CVEs by Year

1 CVE in 2019
2019
1 CVE in 2024
2024
1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

Medium
3

3 total CVEs

CVE-2024-12743medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

MailPoet <= 5.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Mar 6, 2025 Patched in 5.5.2 (65d)
CVE-2024-10103medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

MailPoet <= 5.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Oct 29, 2024 Patched in 5.3.2 (18d)
CVE-2019-11843medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

MailPoet – emails and newsletters in WordPress <= 3.23.1 - Reflected Cross-Site Scripting via URL parameter

Apr 16, 2019 Patched in 3.23.2 (1743d)
Maintenance & Trust

MailPoet – Newsletters, Email Marketing, and Automation Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 10, 2026
PHP min version7.4
Downloads63.9M

Community Trust

Rating88/100
Number of ratings1,411
Active installs500K
Developer Profile

MailPoet – Newsletters, Email Marketing, and Automation Developer Profile

MailPoet

1 plugin · 500K total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
609 days
View full developer profile
FAQ

Frequently Asked Questions about MailPoet – Newsletters, Email Marketing, and Automation