WP Mail
Limited data: WP Mail has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 30 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 16 Jan 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.30 Jan 2026Evidence
- CriticalSEC-2Vulnerability published 5 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.19 Sep 2025Evidence
- CriticalMNT-1No release in 122 months (last release 6 Oct 2016). Plan a replacement if the plugin is important to your site.6 Oct 2017Evidence
- WarningMNT-2Tested up to WordPress 4.6.30, 25 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 10 years ago
- Releases, 24 months
- 0
- Tested up to
- 4.6 vs 7.1
- Requires PHP
- not stated supported 8.2+
Last release 6 Oct 2016. Tested up to 4.6, 25 major versions behind WordPress 7.1. Release history builds as we see new versions.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 16 Jan 2026 | Mail <= 1.3 - Reflected Cross-Site Scripting | 6.1 | <= 1.3 | No fix | n/a |
| 5 Sep 2025 | WP Mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.3 | No fix | n/a |
| 23 Jul 2016 | WP Mail <= 1.1 - Reflected Cross-Site Scripting | 6.1 | < 1.2 | 1.2 | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 5.0 from 1 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 1 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
600+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 1.3 |
|---|---|
| Author | mndpsingh287 |
| Added | 22 Jul 2016 |
| Last updated | 6 Oct 2016 |
| Active installs | 600+ |
| Requires WordPress | 3.4 |
| Tested up to | 4.6.30 |
| Requires PHP | not stated |
| Category | not stated |
| Tags | mail, mailers, wp_mail, send mail, mail system |
Other plugins by this author: Duplicate Page, File Manager, Theme Editor, Sticky Header, Cryptocurrency Payment Gateway WooCommerce - MaxelPay, Live Chat, UTM Generator, Pattern Lock
Questions
Is WP Mail still maintained?
WP Mail was last updated on 6 Oct 2016. Its Canary status is Limited data.
Is WP Mail safe?
WP Mail has 2 published vulnerabilities with no patched version. Its Canary status is Limited data.
Who owns WP Mail?
The wordpress.org author is mndpsingh287. We have recorded no ownership change.
What can I use instead of WP Mail?
We have no healthier plugin in the same category on record yet.