---
title: "Mailchimp for WooCommerce"
description: "Mailchimp for WooCommerce: which stores it suits, strengths, Free plan limits, recommended consent and tracking settings, and fixed vulnerabilities."
language: "en"
locale: "en-US"
type: "plugin-sheet"
canonical: "https://www.wp-masquerade.com/features/camouflaged-plugins/mailchimp-for-woocommerce/"
published: "2026-11-04T08:00:00+00:00"
modified: "2026-11-05T21:14:41+00:00"
translations:
  en-US: "https://www.wp-masquerade.com/features/camouflaged-plugins/mailchimp-for-woocommerce/index.md"
  fr-FR: "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/mailchimp-for-woocommerce/index.md"
  es-ES: "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/mailchimp-for-woocommerce/index.md"
  de-DE: "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/mailchimp-for-woocommerce/index.md"
  it-IT: "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/mailchimp-for-woocommerce/index.md"
  pt-BR: "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/mailchimp-for-woocommerce/index.md"
  nl-NL: "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/mailchimp-for-woocommerce/index.md"
---

# Mailchimp for WooCommerce

Mailchimp for WooCommerce, Mailchimp’s free official integration, sends your store’s customers, orders and carts to your audience. Our take to help you decide whether it fits, what the Mailchimp account really costs, and the consent, tracking and access settings to check.

## The essentials

- Best for WooCommerce stores that already run their emails and cart recovery in Mailchimp.
- Main caveat: the Free plan stops at 250 contacts and does not include automation flows.
- Free plugin; the cost is your Mailchimp plan, billed monthly based on your contact count.

## What Mailchimp for WooCommerce does in your store

Mailchimp for WooCommerce is Mailchimp’s official integration for [WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce/). Once you connect your Mailchimp account through a secure OAuth sign-in window, the plugin sends your customers (first name, last name, email address), products, coupon codes and orders to a Mailchimp audience, followed by real-time cart activity. Mailchimp then uses that data for abandoned cart emails, order notifications, product recommendations and segments based on purchase history.

In WordPress, the plugin adds a Mailchimp menu with five tabs (Overview, Store, Audience, Logs, Advanced) and a newsletter opt-in checkbox on the checkout page, configured in the Checkout block options or through a form hook with the classic shortcode checkout. Syncing runs through an Action Scheduler queue that relies on the WordPress [cron](https://www.wp-masquerade.com/glossary/cron-wp-cron/). A Mailchimp script loaded from chimpstatic.com powers pop-up signup forms and Google remarketing ads.

The plugin is free and published by Mailchimp, part of Intuit. The cost sits in the Mailchimp account: the Free plan is capped at 250 contacts, and the Essentials, Standard and Premium plans are billed monthly based on your contact count.

![Diagram: Mailchimp for WooCommerce works on visitors and bots, database and files, external services. Public traces: folder name (hidden with Pro); tag IDs (hidden with Pro); JavaScript variables (still visible); files served by the vendor (still visible).](https://www.wp-masquerade.com/media/wpm-sheets/mailchimp-woo/diagram-en.svg?v=aeecb8f2)

## Which stores Mailchimp for WooCommerce suits

The plugin makes sense when Mailchimp already is, or is about to become, your email marketing tool:

- **Stores that want to recover abandoned carts** and follow up after a purchase, with order data synced automatically.
- **Merchants who segment** their campaigns by products bought, purchase frequency or average order value.
- **Marketing teams** that also use Mailchimp’s landing pages, pop-ups and Facebook, Instagram or Google ads.
- **Multilingual sites on WPML**, which the plugin states it is compatible with.

It is the wrong choice if you want to keep your emails and contacts inside WordPress: a plugin like [Cart Abandonment Recovery](https://www.wp-masquerade.com/features/camouflaged-plugins/cart-abandonment-recovery/) sends recovery emails from your own site. The same goes if your list will grow well past 250 contacts with no budget for a paid plan, or if your host blocks the WordPress cron, which the whole sync depends on.

## Mailchimp for WooCommerce strengths and limits

### Strengths

- **Official and free.** Customers, products, coupon codes, orders and carts flow to Mailchimp with no custom development.
- **A clear choice at import.** The setup wizard lets you import customers as subscribed, as non-subscribed, or only those already in your audience.
- **Consent is respected.** Customers who leave the box unchecked arrive as transactional contacts, which cannot be exported, and Mailchimp’s double opt-in applies when it is turned on.
- **Granular tracking settings.** Cart tracking can cover all customers, subscribers only or be turned off, and the landing page cookie is off by default.

### Limits

- **Tied to one service.** The plugin only works with Mailchimp, and your emails, automations and reports live on Mailchimp.
- **A very limited Free plan.** Mailchimp’s pricing grid caps it at 250 contacts, 500 emails a month and one audience, and does not include automation flows.
- **Non-subscribers count too.** Mailchimp warns that imported customers, subscribed or not, count toward your billed contacts, with extra charges if you go over.
- **No French, German or Italian translation.** There is no language pack for those languages, so the interface stays in English on those sites.
- **A pre-checked box.** The checkout opt-in checkbox is checked by default until you change that setting.

## The Mailchimp for WooCommerce settings we recommend

Paths start from the Mailchimp menu (version 6.3), with the labels of the English interface.

| Setting | Recommended value | Why |
| --- | --- | --- |
| **Import customers (initial sync)**  Connection wizard > Review sync settings | “Sync as non-subscribed”, unless you can prove consent | “Sync as subscribed” states that you have permission to send marketing to all of these customers. |
| **Checkbox display options**  Store > Checkout page settings | “Unchecked by default” | Pre-checked by default; in Europe, the GDPR does not accept a pre-ticked box as consent. |
| **Plugin permission level**  Store | “Administrators Only” | By default, shop managers can also change the connection and settings and disconnect the account. |
| **Cart tracking preferences**  Audience | Depends on your legal basis: all customers, or “Only track carts for subscribed contacts” | Tracking every cart sends Mailchimp the carts of customers who have not agreed to marketing. |
| **Enable landing page tracking**  Audience > Landing page tracking preferences | Unchecked (default) | This cookie targets logged-out visitors, and the plugin itself warns about its possible performance impact. |
| **Mailchimp code snippet**  Advanced | “Deactivate” if you use neither pop-ups nor Google remarketing | On by default, it loads a script from chimpstatic.com on your site’s pages. |
| **Enable support**  Advanced | Unchecked (default), on only during a support ticket | This remote diagnostics feature is used by Mailchimp’s development team to troubleshoot syncing. |
| **Logging preferences**  Logs | “Standard”, “Debug” only while troubleshooting | Debug mode records far more detail; switch back to “Standard” afterward. |

- Check that the WordPress cron runs (or that a server cron replaces it): without it, syncing stalls.
- Place a test order without checking the box and confirm in Mailchimp that the contact shows up as transactional.
- Compare your WooCommerce customer count with your Mailchimp plan’s contact limit before starting the import.
- In Plugins, turn on auto-updates for Mailchimp for WooCommerce.

## Mailchimp for WooCommerce security: carts and the REST API

Recent vulnerabilities mostly hit the endpoints that handle carts and configuration:

- **CVE-2026-73346**: an [SQL injection](https://www.wp-masquerade.com/glossary/sql-injection/) limited to administrator accounts, fixed in 6.2.
- **CVE-2026-92435**: several REST API routes did not check the caller’s capabilities, letting unauthenticated users trigger a persistent state change. Fixed in 6.1.1.
- **CVE-2026-92436**: an [IDOR](https://www.wp-masquerade.com/glossary/idor/) flaw let an unauthenticated attacker who knew a customer’s email address confirm that the person shops at the store and read their saved cart. Fixed in 6.3.
- **CVE-2026-92437**: with no authentication or ownership check, an attacker could modify or delete another customer’s abandoned cart. Fixed in 6.3.

What to do: stay on the latest version, 6.3 at minimum as of today, and restrict access to the settings to administrators. Customer data leaks also raise GDPR questions, covered in our guide to logs, IP addresses and retention periods, and the store as a whole is covered in our WooCommerce security guide. WP Masquerade Pro hides the plugin’s folder and file URLs as well as its script IDs, which makes it harder for bots to spot without fixing any vulnerability; the chimpstatic.com script and the `mailchimp_public_data` JavaScript variable stay visible.

## Mailchimp for WooCommerce FAQ

**Is Mailchimp for WooCommerce free?**

The plugin is. You do need a Mailchimp account, though: the Free plan stops at 250 contacts, and beyond that you need a paid plan billed by contact count.

**Will my customers be subscribed to my newsletter without their consent?**

Not with the right settings: a customer who leaves the box unchecked arrives as a transactional contact, usable for abandoned cart emails and order notifications, not for your campaigns. Also pick “Sync as non-subscribed” for the initial import if you have not collected consent.

**Why is my sync stuck?**

The queue depends on the WordPress cron, so make sure it is not disabled. Mailchimp also points to CPU throttling at some hosts, caches that intercept the REST API and low memory during the first import.

**Can I use it alongside MC4WP?**

Yes, they do different jobs: [MC4WP](https://www.wp-masquerade.com/features/camouflaged-plugins/mailchimp-for-wordpress/) adds signup forms to WordPress, while Mailchimp for WooCommerce syncs store data. Just avoid showing two opt-in checkboxes at checkout.

## Key facts

- Category: E-commerce
- Vendor: Mailchimp
- Price: Free; Mailchimp account required, Free plan capped at 250 contacts, paid plans billed monthly by contact count
- Active installations (wordpress.org): 200 000+
- Version: 6.3
- Official page: https://wordpress.org/plugins/mailchimp-for-woocommerce/

## What WP Masquerade hides

- Handled by WP Masquerade Pro only
- With Pro: folder name, tag IDs
- Still visible: JavaScript variables, files served by the vendor