Skip to content
PluginCanary

Mailgun for WordPress

by Mailgun · 80,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 21 Aug 2026, fixed in 2.2.1.

87/ 100 Canary Score
Sub-scores for Mailgun for WordPress
Ownership100
Maintenance100
Security85
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 21 Aug 2026, fixed in 2.2.1. Update to version 2.2.1 or later.21 Aug 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Mailgun10 Dec 2013 to 24 May 2021, 99 commits
omykhailenko18 Aug 2022 to 25 Sep 2026, 182 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
40 days ago
Releases, 24 months
13
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Mailgun for WordPress
Q1 20241
Q2 20240
Q3 202469
Q4 20242
Q1 20254
Q2 20252
Q3 20250
Q4 20250
Q1 20261
Q2 20260
Q3 20264
Q4 20260

Last release 25 Sep 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
21 Aug 2026Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys9.8<= 2.2.02.2.10
13 Jul 2026Mailgun for WordPress <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Mailgun List Subscription5.3<= 2.2.02.2.10

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Mailgun for WordPress
Q1 20244.5
Q2 20255.0
Q3 20255.0
Q2 20265.0

Average rating rose from 4.5 to 5.0 between Q1 2024 and Q2 2026.

Rating distribution
5 star29
4 star4
3 star2
2 star4
1 star10
Latest low reviews

Momentum

80,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Mailgun for WordPress
4 May 20261,143
11 May 20262,672
18 May 202632,573
25 May 202611,768
1 Jun 20267,205
8 Jun 20265,816
15 Jun 20265,254
22 Jun 20264,284
29 Jun 20263,430
6 Jul 202629,141
13 Jul 202637,864
20 Jul 202614,947
27 Jul 20267,757
3 Aug 20267,301
10 Aug 20265,336
17 Aug 20264,285
24 Aug 20265,123
31 Aug 202635,010
7 Sep 202611,527
14 Sep 202610,105
21 Sep 20269,791
28 Sep 20266,433
5 Oct 20266,240
12 Oct 20265,433
19 Oct 20266,990
26 Oct 20266,012
2 Nov 20261,138

Weekly downloads over the last 4 weeks are 54% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & MoreScore 93 · 4,000,000+Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and moreScore 92 · 500,000+FluentSMTP - WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTPScore 91 · 700,000+Stop WP Emails Going to SpamScore 91 · 10,000+WP Offload SES LiteScore 91 · 10,000+

Facts

Version2.2.3
AuthorMailgun
Added21 Nov 2012
Last updated25 Sep 2026
Active installs80,000+
Requires WordPress5.6
Tested up to7.1.4
Requires PHP7.4
CategoryCommunication & Messaging > SMTP & Email Delivery Services
Tagsapi, http, mail, smtp, mailgun

Questions

Is Mailgun for WordPress still maintained?

Mailgun for WordPress was last updated on 25 Sep 2026. Its Canary status is Healthy.

Is Mailgun for WordPress safe?

Mailgun for WordPress has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Mailgun for WordPress?

The wordpress.org author is Mailgun. Recent committers: omykhailenko, Mailgun, sivel, plugin-master. We have recorded no ownership change.

What can I use instead of Mailgun for WordPress?

Plugins in the same category with a higher Canary Score: WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, FluentSMTP - WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP, Stop WP Emails Going to Spam, WP Offload SES Lite.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue