Skip to content
PluginCanary

Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App

by Saad Iqbal · 300,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 5 Oct 2026, fixed in 4.0.2.

80/ 100 Canary Score
Sub-scores for Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
Ownership100
Maintenance100
Security60
Support73
Reputation60

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 5 Oct 2026, fixed in 4.0.2. Update to version 4.0.2 or later.5 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 26 Aug 2026, fixed in 4.0.1. Update to version 4.0.1 or later.26 Aug 2026Evidence
  • InfoSEC-314 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
yehudah15 Oct 2017 to 13 Feb 2022, 210 commits
wpexpertsio23 Feb 2022 to 24 Sep 2026, 423 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
41 days ago
Releases, 24 months
37
Tested up to
7.1 current
Requires PHP
7.1 supported 8.2+
Releases per quarter for Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
Q1 20245
Q2 20247
Q3 20242
Q4 20247
Q1 202510
Q2 20253
Q3 20254
Q4 20255
Q1 20262
Q2 20266
Q3 20262
Q4 20260

Last release 24 Sep 2026. Tested with WordPress 7.1 (current).

Support

73% of 15 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
5 Oct 2026Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)7.2<= 4.0.14.0.20
26 Aug 2026Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App 4.0.0-beta.1 - Missing Authorization to Authenticated (Subscriber+) Settings Change6.34.0.0-beta.14.0.10
28 May 2026Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App <= 3.6.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.6.23.6.30
30 Apr 2026Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter6.1<= 3.0.03.1.00
17 Mar 2026Post SMTP <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'event_type'7.2<= 3.8.03.9.00
17 Mar 2026Post SMTP <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Office 365 OAuth Configuration Overwrite5.3<= 3.8.03.9.00
3 Dec 2025Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.1 - Missing Authorization to Authenticated (Subscriber+) OAuth Token Update5.4<= 3.6.13.6.20
31 Oct 2025Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure9.8<= 3.6.03.6.10
2 Sep 2025Post SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update4.3<= 3.4.13.4.20
21 Jul 2025Post SMTP <= 3.2.0 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via Email Log Exposure8.8<= 3.2.03.3.00
7 Mar 2025Post SMTP <= 3.1.2 - Authenticated (Administrator+) SQL Injection via columns Parameter4.9<= 3.1.23.1.30
17 Feb 2025Post SMTP <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.0.23.1.00
7 Jan 2025Post SMTP <= 2.9.11 - Missing Authorization via regenerate_qrcode()4.3<= 2.9.112.9.120
15 Nov 2024Post SMTP <= 2.9.9 - Authenticated (Administrator+) SQL Injection4.9<= 2.9.92.9.105
22 May 2024POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.9.3 - Authenticated (Administrator+) SQL Injection7.2<= 2.9.32.9.47
10 Jan 2024POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API9.8<= 2.8.72.8.80
2 Jan 2024POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Unauthenticated Stored Cross-Site Scripting via device7.2<= 2.8.72.8.80
2 Jan 2024POST SMTP Mailer <= 2.8.6 - Reflected Cross-Site Scripting via msg6.1<= 2.8.62.8.70
21 Dec 2023POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.6 - Authenticated (Administrator+) SQL Injection7.2<= 2.8.62.8.70
6 Nov 2023POST SMTP Mailer <= 2.7.0 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.7.02.7.10
3 Oct 2023Post SMTP <= 2.6.0 - Authenticated (Administrator+) SQL Injection7.2< 2.6.12.6.10
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.12.1.2-beta.1 to 2.5.72.5.9-beta.10
11 Jul 2023Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email7.2<= 2.5.72.5.80
26 Jun 2023POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Arbitrary Log Deletion4.3<= 2.5.62.5.70
26 Jun 2023POST SMTP Mailer <= 2.5.6 - Cross-Site Request Forgery to Account Compromise6.5<= 2.5.62.5.70

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
Q3 20255.0
Q4 20254.3
Q1 20265.0
Q2 20262.6
Q3 20263.7
Q4 20265.0

Average rating stayed at 5.0 between Q3 2025 and Q4 2026.

Rating distribution
5 star478
4 star6
3 star6
2 star3
1 star35
Latest low reviews

Momentum

300,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
4 May 20266,545
11 May 202613,895
18 May 2026180,355
25 May 2026104,397
1 Jun 2026151,631
8 Jun 202636,263
15 Jun 202623,401
22 Jun 2026136,204
29 Jun 202642,935
6 Jul 202635,078
13 Jul 202618,985
20 Jul 202619,982
27 Jul 202615,884
3 Aug 202613,809
10 Aug 202612,315
17 Aug 202611,991
24 Aug 2026225,749
31 Aug 202638,251
7 Sep 202623,034
14 Sep 202627,002
21 Sep 2026142,987
28 Sep 202645,179
5 Oct 202644,589
12 Oct 202621,239
19 Oct 202624,798
26 Oct 202618,588
2 Nov 20262,811

Weekly downloads over the last 4 weeks are 68% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & MoreScore 93 · 4,000,000+Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and moreScore 92 · 500,000+FluentSMTP - WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTPScore 91 · 700,000+Stop WP Emails Going to SpamScore 91 · 10,000+WP Offload SES LiteScore 91 · 10,000+

Facts

Version4.0.2
AuthorSaad Iqbal
Added15 Oct 2017
Last updated24 Sep 2026
Active installs300,000+
Requires WordPress5.6.0
Tested up to7.1.4
Requires PHP7.1
CategoryCommunication & Messaging > SMTP & Email Delivery Services
Tagssmtp, email logs, gmail smtp, office 365, wordpress smtp

Other plugins by this author: Password Protected, CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.), Advanced File Manager - Ultimate File Manager for WordPress And Document Library Solution, All In One Login, Social Preview and Open Graph Tags, Email Templates Customizer and Designer for WordPress and WooCommerce, Gutena Forms - Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder, WC Hide Shipping Methods, New User Approve, Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred, License Manager for WooCommerce, Gutena Tabs

Questions

Is Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App still maintained?

Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App was last updated on 24 Sep 2026. Its Canary status is Healthy.

Is Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App safe?

Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App has no open unpatched vulnerabilities on record. 14 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App?

The wordpress.org author is Saad Iqbal. Recent committers: wpexpertsio, yehudah, plugin-master. We have recorded no ownership change.

What can I use instead of Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App?

Plugins in the same category with a higher Canary Score: WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, FluentSMTP - WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP, Stop WP Emails Going to Spam, WP Offload SES Lite.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue