Skip to content
PluginCanary

Mail logging & Catcher

by JWardee · 20,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 18 Oct 2026, 4 releases in 24 months, no unpatched vulnerabilities.

88/ 100 Canary Score
Sub-scores for Mail logging & Catcher
Ownership100
Maintenance100
Security80
Support70
Reputation85

How the score works

Quick answers

Is Mail logging & Catcher still maintained?
Yes. Last release 18 Oct 2026, 4 releases in the last 24 months. 18 Oct 2026 · wordpress.org
Who owns Mail logging & Catcher, and has it changed hands?
No change recorded. Main committer Wardee since Dec 2017. 4 Nov 2026 · SVN log
Was Mail logging & Catcher removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Mail logging & Catcher safe?
7 known vulnerabilities, all fixed (latest in 2.3.0). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
Is the latest Mail logging & Catcher update safe to install?
No ownership change before 2.3.0. No one-star spike after it. 18 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Wardee19 Dec 2017 to 18 Oct 2026, 101 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
17 days ago
Releases, 24 months
4
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Mail logging & Catcher
Q1 20241
Q2 20242
Q3 20241
Q4 20240
Q1 20250
Q2 20250
Q3 20251
Q4 20250
Q1 20260
Q2 20261
Q3 20261
Q4 20261

Last release 18 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.9.

Average rating per quarter for Mail logging & Catcher
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20264.0
Q4 20265.0

Average rating stayed at 5.0 between Q1 2024 and Q4 2026.

Rating distribution
5 star104
4 star2
3 star0
2 star1
1 star1
Latest low reviews

Security record

2 vulnerabilities in 24 months (7 on record), all patched (latest fixed in 2.3.0).

Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026Mail logging & Catcher <= 2.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure to Privilege Escalation to Mail Log Viewer / Password-Reset Email Disclosure7.5<= 2.2.02.3.0Patched before disclosure
2 Oct 2026Mail logging <= 2.1.12 - Unauthenticated Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Message7.2<= 2.1.122.2.0Patched before disclosure
27 Sep 2024WP Mail Catcher <= 2.1.9 - Reflected Cross-Site Scripting6.1<= 2.1.92.1.10Patched before disclosure
11 Apr 2024WP Mail Catcher <= 2.1.6 - Cross-Site Request Forgery4.3<= 2.1.62.1.7Patched before disclosure
21 Dec 2023Mail logging – WP Mail Catcher <= 2.1.3 - Authenticated(Administrator+) SQL Injection6.6< 2.1.42.1.4Patched before disclosure
29 Oct 2023Mail logging - WP Mail Catcher <= 2.1.3 - Authenticated (Admin+) SQL Injection7.2<= 2.1.32.1.4Patched before disclosure
9 Jun 2023WP Mail Catcher <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject7.2<= 2.1.22.1.31

Changelog mentions of security fixes: 2.2.0 (security, escaping, sanitize); 2.3.0 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Mail logging & Catcher
4 May 20261,222
11 May 20261,629
18 May 20261,980
25 May 20261,226
1 Jun 2026948
8 Jun 2026781
15 Jun 2026723
22 Jun 2026721
29 Jun 2026629
6 Jul 2026747
13 Jul 2026651
20 Jul 2026786
27 Jul 2026745
3 Aug 2026704
10 Aug 2026770
17 Aug 2026634
24 Aug 2026628
31 Aug 2026642
7 Sep 2026583
14 Sep 2026926
21 Sep 2026776
28 Sep 20268,954
5 Oct 20262,901
12 Oct 20262,403
19 Oct 20268,479
26 Oct 20263,433
2 Nov 2026422

Weekly downloads over the last 4 weeks are 121% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Disable EmailsScore 91 · 30,000+Check & Log EmailScore 90 · 90,000+Email LogScore 90 · 80,000+

Facts

Version2.3.0
AuthorJWardee
Added20 Dec 2017
Last updated18 Oct 2026
Active installs20,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP7.4
CategoryCommunication & Messaging > SMTP & Email Delivery Services
Tagslogging, email log, email logger, mail logging, email logging

Questions

Is Mail logging & Catcher still maintained?

Yes. Last release 18 Oct 2026, 4 releases in the last 24 months.

Who owns Mail logging & Catcher, and has it changed hands?

No change recorded. Main committer Wardee since Dec 2017.

Was Mail logging & Catcher removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Mail logging & Catcher safe?

7 known vulnerabilities, all fixed (latest in 2.3.0). Not on the exploited list.

Is the latest Mail logging & Catcher update safe to install?

No ownership change before 2.3.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue