Subscribe2 – Form, Email Subscribers & Newsletters

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

31 searches this plugin appeared in over the last 90 days, 13 listed. 18 left out as unrelated or noise (years, numbers, stray words). 3 of its tags aren't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 7 months ago and the previous band took 2.6 years to cross, so the real count is still just under 20K.

1. ★★★★★ cramos55

   5mo ago

   I’m trying to bulk subscribe WordPress users to all categories created from registered subscribers. I select “All” and then “All Categories” and click the “Bulk Update Categories” button, but it’s not working. How can I fix this? Thank you very much. Intento suscribir masivamente a usuarios de wordpress a todas las categorías creadas desde suscriptores registrados, selecciono todos y al final todas las categorías y haco clic en el botón bulk update categorias, pero no funciona. Como puedo solucionarlo. Muchas gracias.

   Read on wp.org ↗
2. ★★★★★ ddbosk

   11mo ago

   For years I used this with no problem. Then suddenly I started getting daily “mail suspended temporarily because daily limit exceeded” notices from my web host. I deactivated Subscribe2 and the problem stopped. Draw your own conclusions.

   Read on wp.org ↗
3. ★★★★★ Peter Wollerup

   2.5y ago

   Does not update or respond to security issues WordPress Subscribe2 Plugin <= 10.42 is vulnerable to Broken Access Control regarding to Patchstack (PSID: 4de2aa554db5)

   Read on wp.org ↗
4. ★★★★★ webmistressofthedark

   3.7y ago

   The override button has disappeared. Also what’s with this ‘block’ garbage! OMG WP — PLEASE LOSE IT!!!!

   Read on wp.org ↗
5. ★★★★★ skymit

   5.4y ago

   Doesn’t work in latest WP version This topic was modified 5 years, 1 month ago by skymit.

   Read on wp.org ↗
6. ★★★★★ pubwvj

   5.5y ago

   I’ve been using this for a while but it needs a big fix. The plugin should send mail singly and spread out over time rather than all at once. I’m getting complaints from my ISP that the plugin is overloading the server with huge dumps of email. I only have about 1,500 subscribers and if that is overloading then I can only imagine how bad it must be with more popular blogs. Please implement this. I just downgraded my review from five stars to one star. See… there’s a problem that this plugin creates: it overloads the servers with email as described above. I just discovered that the developer is offering a fix for that for $29.99 PER FREAKING YEAR!!!!! It was bad enough that the developer creates a problem and then offers to solve it for a fee. It was worse that the fee is kind of high – I finally decided to pay it untill I discovered… It is absurd that the fee is a reoccurring annual subscription. No thanks. This topic was modified 5 years, 2 months ago by pubwvj. Reason: See comment

   Read on wp.org ↗
7. ★★★★★ sumanashree

   5.8y ago

   I am not able to see the Elementor icon and its setting in my wordpress.org website.

   Read on wp.org ↗
8. ★★★★★ jimmathew

   6.4y ago

   This tool meets our expectations, I would like to recommend.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 10.45 Enhance: Capability checks added for better security. 10.45
2. — Version 10.44 Fix: Security related issues. 10.44
3. — Version 10.43 Update: Appsero client library. Fix: Security related issues. 10.43
4. — Version 10.42 Fix: Subscribers searching filter can’t search by email address. Fix: Post notification email is not sending to public subscribers. 10.42
5. — Version 10.41 Fix: CSRF, Authorization issues when send an email. Fix: Use built-in sanitize_email instead of manual. 10.41
6. — Version 10.40 Fix: {UNSUBLINK} tag not working properly when send an email. Fix: subscribe2 emails no longer sending when publish a post. Fix: template entities not working properly in settings page (line breaks, tabs were lost etc.). 10.40

All 12 disclosed vulnerabilities are patched in the current version (10.48). Sites still on an older version should update.

1. Patched High · 7.2 Subscribe2 – Form, Email Subscribers & Newsletters <= 10.47 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-08-17 CVE-2026-73393 Improper Neutralization of Input During Web Page Generation Affects <= 10.47 Patched in 10.48
2. Patched Medium · 6.1 Subscribe2 <= 10.45 - Reflected Cross-Site Scripting ↗
   2026-08-03 CVE-2026-14331 Improper Neutralization of Input During Web Page Generation Affects <= 10.45 Patched in 10.46
3. Patched Medium · 5.3 Subscribe2 <= 10.44 - Missing Authorization ↗
   2026-02-03 CVE-2026-24944 Missing Authorization Affects <= 10.44 Patched in 10.45
4. Patched High · 7.2 Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP Parameter ↗
   2025-02-18 CVE-2024-11582 Improper Neutralization of Input During Web Page Generation Affects <= 10.43 Patched in 10.44
5. Patched Medium · 4.3 Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout ↗
   2024-04-11 CVE-2024-32110 Missing Authorization Affects <= 10.42 Patched in 10.43
6. Patched Medium · 4.3 Subscribe2 <= 10.40 - Cross-Site Request Forgery ↗
   2023-06-26 CVE-2023-3407 Cross-Site Request Forgery Affects <= 10.40 Patched in 10.41
7. Patched Medium · 4.3 Subscribe2 <= 10.40 - Missing Authorization ↗
   2023-06-26 CVE-2023-1844 Missing Authorization Affects <= 10.40 Patched in 10.41
8. Patched High · 7.1 Subscribe2 <= 10.37 - Cross-Site Request Forgery ↗
   2022-12-22 CVE-2022-4309 Cross-Site Request Forgery Affects <= 10.37 Patched in 10.38
9. Patched Medium · 4.3 Appsero <= 1.2.1 - Missing Authorization ↗
   2022-12-16 Missing Authorization Affects <= 10.37 Patched in 10.38
10. Patched Medium · 4.3 Appsero <= 1.2.0 - Cross-Site Request Forgery ↗
    2022-12-14 CVE-2022-47150 Cross-Site Request Forgery Affects <= 10.37 Patched in 10.38
11. Patched Medium · 6.1 Subscribe2 – Form, Email Subscribers & Newsletters <= 10.15 - Stored Cross-Site Scripting ↗
    2014-10-01 CVE-2014-6604 Improper Neutralization of Input During Web Page Generation Affects < 10.16 Patched in 10.16
12. Patched High · 7.1 Subscribe2 – Form, Email Subscribers & Newsletters < 8.1 - Multiple Cross-Site Scripting ↗
    2014-08-01 Improper Neutralization of Input During Web Page Generation Affects < 8.1 Patched in 8.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 16 languages, 8 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-01 20K+ → 10K+ down after 954 days in tier
2. 2023-08-21 30K+ → 20K+ down after 737 days in tier
3. 2021-08-14 40K+ → 30K+ down after 431 days in tier
4. 2020-06-09 50K+ → 40K+ down after 404 days in tier
5. 2019-05-02 60K+ → 50K+ down after 326 days in tier
6. 2018-06-10 70K+ → 60K+ down after 249 days in tier
7. 2017-10-04 80K+ → 70K+ down after 262 days in tier
8. 2017-01-15 90K+ → 80K+ down after 62 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Subscribe2 – Form, Email Subscribers & Newsletters into a readme, a review or a deck. It updates itself.

Subscribe2 – Form, Email Subscribers & Newsletters: 10K+ active installs, 3.5★ (116 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/subscribe2