MC4WP: Mailchimp for WordPress

by Danny van Kooten

View on WordPress.org

89 Quality Score

Active Installs

27/30

With 1,000,000 active installs, this is one of the most widely used Mailchimp integrations in the WordPress ecosystem.

Update Freshness

25/25

A recent update on 2026-06-22 and active development history put the maintenance score at a perfect 100.

User Rating

14/15

A 96 out of 100 from 1,497 reviewers indicates consistently strong user satisfaction.

Support Health

8/15

Only 5 support threads exist in the tracked period, with all 5 resolved, which is excellent in resolution rate but reflects low overall support volume.

WP Compatibility

15/15

Tested with WordPress 7.0 and requiring PHP 7.4, the plugin scores full marks for compatibility with current standards.

Scores higher than 98% of indexed plugins

About

The #1 Mailchimp plugin for WordPress. Allows you to add a multitude of newsletter sign-up methods to your site.

Active Installs 1M+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-16 7:31am GMT

Requires WordPress 5.3+

Tested Up To 7.1.1

Requires PHP 7.4+

Security History

13 known vulnerabilities, all patched

1 High 12 Medium

Most recent: September 18, 2026

View details ▸

MC4WP: Mailchimp for WordPress <= 4.14.0 - Reflected Cross-Site Scripting via 'data' Dynamic Content Tag Medium

September 18, 2026 Patched in ["4.14.1"] CVE-2026-87917

MC4WP: Mailchimp for WordPress <= 4.12.0 - Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages Medium

August 21, 2026 Patched in ["4.12.1"] CVE-2026-4561

MC4WP: Mailchimp for WordPress <= 4.11.1 - Missing Authorization to Unauthenticated Arbitrary Subscription Deletion Medium

March 10, 2026 Patched in ["4.12.0"] CVE-2026-1781

MailChimp for Wordpress <= 4.9.16 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

September 20, 2024 Patched in ["4.9.17"] CVE-2024-8680

MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting Medium

September 18, 2024 Patched in ["4.9.17"] CVE-2024-8850

MC4WP <= 4.9.9 - Missing Authorization via listen Medium

December 27, 2023 Patched in ["4.9.10"] CVE-2023-51682

MC4WP: Mailchimp for WordPress <= 4.8.6 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

March 2, 2022 Patched in ["4.8.7"] CVE-2021-36833

MC4WP: Mailchimp for WordPress < 4.8.7 - Cross-Site Scripting Medium

March 2, 2022 Patched in ["4.8.7"]

MC4WP: Mailchimp for WordPress <= 4.8.4 - Cross-Site Request Forgery High

June 1, 2021 Patched in ["4.8.5"]

MC4WP: Mailchimp for WordPress <= 4.8.4 - Open Redirect Medium

June 1, 2021 Patched in ["4.8.5"]

MC4WP: Mailchimp for WordPress <= 4.1.6 - Reflected Cross-Site Scripting Medium

November 9, 2019 Patched in ["4.1.7"]

Mailchimp For WP <= 4.1.7 - Cross-Site Scripting Medium

September 8, 2017 Patched in ["4.1.8"] CVE-2017-18577

MailChimp for WordPress <= 4.0.10 - Reflected Cross-Site Scripting Medium

December 13, 2016 Patched in ["4.0.11"] CVE-2016-10871

What It Does

MC4WP connects your WordPress site to Mailchimp so you can grow your email list through signup forms, checkboxes, and integrations with popular form and ecommerce plugins. It handles the syncing of subscriber data, supports double opt-in, and works with most major form builders through add-ons. Practically, it lets you plug Mailchimp into nearly any part of your site without touching code.

Who It's For

This plugin is a strong fit for bloggers, small businesses, content creators, and nonprofits that already use Mailchimp as their email service provider and want a lightweight, reliable way to capture subscribers from WordPress. It also suits agencies managing multiple client sites who need a dependable Mailchimp bridge without bloat.

Who Should Skip It

If you do not use Mailchimp, or you want an all-in-one newsletter and automation platform built directly into WordPress, this plugin is not for you. You would also be better served elsewhere if you need a full SMTP delivery or email logging tool, since MC4WP focuses on list syncing, not sending.

The Bottom Line

MC4WP remains the de facto choice for connecting WordPress to Mailchimp, with 1 million installs and a 96 percent user rating backing that reputation. Its overall quality score of 88.77 is solid, though it sits slightly below WP Mail SMTP in the same comparison set. If Mailchimp is your email tool, this plugin is hard to beat for stability and breadth of integrations.

Related Plugins

WP Mail SMTP by WPForms 97/100

Pick this instead if your problem is email deliverability and SMTP routing, not Mailchimp list building.

Post SMTP 91/100

Choose this if you want advanced deliverability features like backup SMTP, alerts, and a mobile app rather than newsletter capture.

Hostinger Reach 89/100

Pick this if you want AI-assisted email marketing built into WordPress rather than a dedicated Mailchimp bridge.

MailPoet 89/100

Choose this if you want newsletters, automation, and sending hosted inside WordPress instead of syncing to Mailchimp.

Easy WP SMTP 87/100

Pick this if you need a free SMTP plugin for Gmail, Office 365, or custom providers and do not need Mailchimp integration.

Compare MC4WP: Mailchimp for WordPress

MC4WP: Mailchimp for WordPress vs WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin 97/100

MC4WP: Mailchimp for WordPress vs Newsletter – Send awesome emails from WordPress 85/100