Emails Catch All
Healthy: released 6 months ago, no open vulnerabilities.
Based on 3 of 5 areas
| Ownership | 100 |
|---|---|
| Maintenance | 85 |
| Security | 90 |
| Support | No data |
| Reputation | No data |
Active signals
Open issues right now, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
History: 1 past vulnerability, patched. Patched issues are listed in the Security record, not here.
Quick answers
- Is Emails Catch All still maintained?
- Yes. Last release 20 May 2026, 4 releases in the last 24 months. 20 May 2026 · wordpress.org
- Who owns Emails Catch All, and has it changed hands?
- No change recorded. Main committer Iulia Cazan since Feb 2016. 3 Nov 2026 · SVN log
- Was Emails Catch All removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Emails Catch All safe?
- 1 known vulnerability, fixed (latest in 3.5.4). Not on the exploited list. 11 Oct 2025 · Wordfence Intelligence
- Is the latest Emails Catch All update safe to install?
- No ownership change before 3.6.0. No one-star spike after it. 20 May 2026 · Release history
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| Iulia Cazan | 15 Feb 2016 to 20 May 2026, 70 commits |
|---|
1 committer recorded. No ownership changes recorded since 2016.
Maintenance
- Last release
- 6 months ago
- Releases, 24 months
- 4
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 1 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 1 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 20 May 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Support
- Resolved, last 2 months
- n/a
- Threads, last 2 months
- 0
Trend appears after 8 weekly snapshots.
Security record
1 vulnerability in 24 months, patched (latest fixed in 3.5.4).
Show 1 patched vulnerability
| Date | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 11 Oct 2025 | Authenticated (Subscriber+) Information Exposure to Password Reset and Privilege Escalation | 8.8 | <= 3.5.3 | 3.5.4 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Reputation
Last 90 days: no reviews. Lifetime: 5.0.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 5.0 |
| 5 star | 8 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
- Active installs
- 600+
Trend appears after 8 weekly snapshots.
Facts
- Version
- 3.6.0
- Author
- Iulia Cazan
- Added
- 15 Feb 2016
- Last updated
- 20 May 2026
- Active installs
- 600+
- Requires WordPress
- 4.9.8
- Tested up to
- 7.0.8
- Requires PHP
- 7.4
- Category
- not stated
- Tags
- email log, mail smtp, disable email, catch all emails, replace email recipients
Other plugins by this author: Login IP & Country Restriction, Image Regenerate & Select Crop, Latest Post Shortcode, Sticky Header 2020, Easy Replace Image, Easy Populate Posts
Questions about Emails Catch All
Is Emails Catch All still maintained?
Yes. Last release 20 May 2026, 4 releases in the last 24 months.
Who owns Emails Catch All, and has it changed hands?
No change recorded. Main committer Iulia Cazan since Feb 2016.
Was Emails Catch All removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Emails Catch All safe?
1 known vulnerability, fixed (latest in 3.5.4). Not on the exploited list.
Is the latest Emails Catch All update safe to install?
No ownership change before 3.6.0. No one-star spike after it.