Plugin inspection:

MailPoet Newsletters

Use with caution

Last revised:

Confidence: Medium
This plugin has been given a short, targeted code review.

Before using this plugin, you should carefully consider these findings. Read more about this recommendation.


This recommendation applies to version 2.6.13 of this plugin, but the most recent version is 2.21. These findings may no longer be correct.


  • At over 34,000 lines of PHP this is a very large plugin, which makes it difficult to thoroughly assess
  • Uses eval (helpers/render_engine.php line 600 and 615, inc/dBug.php line 418)
  • Uses create_function but not in a manner which looks vulnerable

Reason for the 'Use with caution' result

The plugin contains or is likely to contain a vulnerability which could be exploited by a privileged user to affect the site’s confidentiality, integrity or availability in a manner exceeding their privileges:

Uses eval().