Ultimate WP Mail
Healthy: 6 vulnerabilities published in the last 24 months.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 55 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- InfoSEC-36 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 30 days ago
- Releases, 24 months
- 1
- Tested up to
- 7.1 current
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 1 |
Last release 5 Oct 2026. Tested with WordPress 7.1 (current).
Support
0% of 2 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 22 Sep 2025 | Ultimate WP Mail <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.3.8 | 1.3.9 | n/a |
| 15 Jul 2025 | Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function | 7.5 | 1.0.17 to 1.3.6 | 1.3.7 | n/a |
| 5 Jun 2025 | Ultimate WP Mail <= 1.3.5 - Missing Authorization | 4.3 | <= 1.3.5 | 1.3.6 | n/a |
| 7 May 2025 | Ultimate WP Mail <= 1.3.4 - Cross-Site Request Forgery | 4.3 | <= 1.3.4 | 1.3.5 | n/a |
| 7 May 2025 | Ultimate WP Mail <= 1.3.4 - Authenticated (Contributor+) SQL Injection | 6.5 | <= 1.3.4 | 1.3.5 | n/a |
| 9 Apr 2025 | Ultimate WP Mail <= 1.3.13 - Open Redirect | 6.1 | <= 1.3.13 | 1.4.0 | 545 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.5 from 21 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 16 |
|---|---|
| 4 star | 2 |
| 3 star | 1 |
| 2 star | 1 |
| 1 star | 1 |
Momentum
700+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.4.0 |
|---|---|
| Author | Rustaurius |
| Added | 19 Oct 2017 |
| Last updated | 5 Oct 2026 |
| Active installs | 700+ |
| Requires WordPress | 5.0 |
| Tested up to | 7.1.4 |
| Requires PHP | not stated |
| Category | Communication & Messaging > SMTP & Email Delivery Services |
| Tags | smtp, email log, sms notifications, email notifications, woocommerce notifications |
Other plugins by this author: Ultimate FAQ Accordion Plugin, Five Star Restaurant Reservations - WordPress Booking Plugin, Five Star Business Profile and Schema, Five Star Restaurant Menu and Food Ordering, Ultimate Product Catalog, Order Tracking - WordPress Status Tracking Plugin, Ultimate Lightbox, Ultimate WooCommerce Filters, Slider Ultimate, Ultimate Reviews, Five Star Restaurant Reviews, Ultimate Appointment Booking & Scheduling
Questions
Is Ultimate WP Mail still maintained?
Ultimate WP Mail was last updated on 5 Oct 2026. Its Canary status is Healthy.
Is Ultimate WP Mail safe?
Ultimate WP Mail has no open unpatched vulnerabilities on record. 6 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Ultimate WP Mail?
The wordpress.org author is Rustaurius. We have recorded no ownership change.
What can I use instead of Ultimate WP Mail?
Plugins in the same category with a higher Canary Score: WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, FluentSMTP - WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP, WP Offload SES Lite, Send Emails with Mandrill.