phpList 3.6.14 released: security release

Hello everyone,

phpList 3.6.14 is now available for download, including security improvements, new features & translations.
You can update your phpList installation using the Automatic Updater, or you can download it directly from Sourceforge .

:open_book: For the full list of changes, have a look at the Release Notes .

Changes to look for

  • Disallow non-superusers to elevate admin admin privileges. See Pull Request #986.
  • Use config.php in the default location when using the command line. See Pull Request #977.
  • Increase the size of the modifiedby field to conform with the size increase of the loginname. See Pull Request #976.
  • Correct the display of a select list for a boolean config item. See Pull Request #975.
  • Call the messageReQueued() method when a campaign is resent to additional lists. See Pull Requests #974.
  • Allow plugins to be installed from GitLab as well as GitHub. See Pull Request #973.
  • Remove outdated settings and code that are no longer needed. See Pull Request #972.
  • Update the composer.lock file to use the latest CKEditor, Common, and Updater plugins. See Pull Request #971.
  • Update to UUID parsing. See Pull Request 970.
  • When using domain throttling, apply delay only when email was sent. See Pull Request #968.
  • Replace constants in the bounce handling code by config.php settings. See Pull Request #963.
  • Remove outdated code that is no longer needed from languages.php. See Pull Request #962.
  • Protect the invocation of the function output(). See Pull Request #959.
  • Changes to increase compatibility with PHP 8. See Pull Request #940.


This release is the work of Dunacan Cameron, Enrico Zamprogno and other Open Source community members who have submitted Pull Requests, bug reports, and valuable feedback, as well as phpList Ltd. developers. To get involved in phpList development, check out the developer resources pages.

Report any issues you find with phpList 4 core or REST API to the corresponding repo on GitHub. Please read the contribution guide on how to contribute to these modules.

If you want to share the news on social media, you can use the links below:




Telegram channel

Happy sending!

Having used phpList for some time, I would love to offer financial assistance to help maintain this. Is there a link for giving where our company could make a donation to the cause? I am also trying to assist where possible in the support area.

Hello @Dougster Thank you for your contributions! All community contributions are very much appreciated!
The entire project code is on GitHub and there you can actually sponsor the project. Have a look at this page: