Contact Form & SMTP Plugin for WordPress
Healthy: maintained, last release 22 Sep 2026, 1 release in 24 months, no unpatched vulnerabilities.
Tested up to WordPress 6.7.11, 4 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 85 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is Contact Form & SMTP Plugin for WordPress still maintained?
- Yes. Last release 22 Sep 2026, 1 release in the last 24 months. 22 Sep 2026 · wordpress.org
- Who owns Contact Form & SMTP Plugin for WordPress, and has it changed hands?
- No change recorded. Main committer dimitris.m since Jan 2025. 4 Nov 2026 · SVN log
- Was Contact Form & SMTP Plugin for WordPress removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Contact Form & SMTP Plugin for WordPress safe?
- 4 known vulnerabilities, all fixed (latest in 2.6.0). Not on the exploited list. 3 Mar 2025 · Wordfence Intelligence
- Is the latest Contact Form & SMTP Plugin for WordPress update safe to install?
- No ownership change before 2.6.1. No one-star spike after it. 20 Jan 2025 · Release history
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.7.11, 4 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| jaredatch | 19 Sep 2018 to 26 Jul 2019, 4 commits |
|---|---|
| dimitris.m | 8 Jan 2025 to 22 Sep 2026, 3 commits |
2 committers recorded. No ownership change since 2015.
Maintenance
- Last release
- 43 days ago
- Releases, 24 months
- 1
- Tested up to
- 6.7 vs 7.1
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 1 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 22 Sep 2026. Tested up to 6.7, 4 major versions behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.7.
| 5 star | 188 |
|---|---|
| 4 star | 18 |
| 3 star | 7 |
| 2 star | 3 |
| 1 star | 7 |
- There is no answer from the support · 2 stars · 30 Jul 2018
Security record
3 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 2.6.0).
Show 4 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 3 Mar 2025 | Contact Form & SMTP Plugin for WordPress by PirateForms <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting | 4.4 | <= 2.5.2 | 2.6.0 | n/a |
| 3 Mar 2025 | Contact Form & SMTP Plugin for WordPress by PirateForms <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting | 4.4 | <= 2.5.2 | 2.6.0 | n/a |
| 29 Jan 2025 | Contact Form & SMTP Plugin for WordPress by PirateForms <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution | 7.3 | <= 2.6.0 | 2.6.1 | Patched before disclosure |
| 27 Jul 2019 | Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection | 7.2 | < 2.5.2 | 2.5.2 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
30,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 310 |
|---|---|
| 11 May 2026 | 652 |
| 18 May 2026 | 561 |
| 25 May 2026 | 524 |
| 1 Jun 2026 | 490 |
| 8 Jun 2026 | 478 |
| 15 Jun 2026 | 465 |
| 22 Jun 2026 | 444 |
| 29 Jun 2026 | 425 |
| 6 Jul 2026 | 478 |
| 13 Jul 2026 | 458 |
| 20 Jul 2026 | 503 |
| 27 Jul 2026 | 553 |
| 3 Aug 2026 | 555 |
| 10 Aug 2026 | 534 |
| 17 Aug 2026 | 500 |
| 24 Aug 2026 | 530 |
| 31 Aug 2026 | 529 |
| 7 Sep 2026 | 514 |
| 14 Sep 2026 | 563 |
| 21 Sep 2026 | 681 |
| 28 Sep 2026 | 652 |
| 5 Oct 2026 | 643 |
| 12 Oct 2026 | 562 |
| 19 Oct 2026 | 906 |
| 26 Oct 2026 | 785 |
| 2 Nov 2026 | 102 |
Weekly downloads over the last 4 weeks are 10% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 2.6.1 |
|---|---|
| Author | Syed Balkhi |
| Added | 23 Sep 2015 |
| Last updated | 22 Sep 2026 |
| Active installs | 30,000+ |
| Requires WordPress | 5.5 |
| Tested up to | 6.7.11 |
| Requires PHP | 5.6 |
| Category | Forms & Data Collection > Contact Forms |
| Tags | smtp, forms, contact form, feedback form, subscribe form |
Other plugins by this author: WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More, WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager, All in One SEO - AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights), Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & More, Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, One Click Demo Import, Smash Balloon Social Photo Feed - Easy Social Feeds Plugin, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery, WP Mail Logging, WP Crontrol
Questions
Is Contact Form & SMTP Plugin for WordPress still maintained?
Yes. Last release 22 Sep 2026, 1 release in the last 24 months.
Who owns Contact Form & SMTP Plugin for WordPress, and has it changed hands?
No change recorded. Main committer dimitris.m since Jan 2025.
Was Contact Form & SMTP Plugin for WordPress removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Contact Form & SMTP Plugin for WordPress safe?
4 known vulnerabilities, all fixed (latest in 2.6.0). Not on the exploited list.
Is the latest Contact Form & SMTP Plugin for WordPress update safe to install?
No ownership change before 2.6.1. No one-star spike after it.