WP Mail Log
Healthy: released 4 months ago, no open vulnerabilities.
Based on 3 of 5 areas
Capped at 95: not enough support or review data for a full score.
| Ownership | 100 |
|---|---|
| Maintenance | 85 |
| Security | 100 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is WP Mail Log still maintained?
- Yes. Last release 30 Jun 2026, 2 releases in the last 24 months. 30 Jun 2026 · wordpress.org
- Who owns WP Mail Log, and has it changed hands?
- No change recorded. Main committer wpvibes since Feb 2021. 4 Nov 2026 · SVN log
- Was WP Mail Log removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is WP Mail Log safe?
- 8 known vulnerabilities, all fixed (latest in 1.1.3). Not on the exploited list. 27 Dec 2023 · Wordfence Intelligence
- Is the latest WP Mail Log update safe to install?
- No ownership change before 1.1.6. No one-star spike after it. 29 Jun 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| wpvibes | 3 Feb 2021 to 30 Jun 2026, 33 commits |
|---|
1 committer recorded. No ownership changes recorded since 2009.
Maintenance
- Last release
- 4 months ago
- Releases, 24 months
- 2
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 2 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 30 Jun 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Reputation
Last 90 days: no reviews. Lifetime: 4.9.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 4.9 |
| Q4 2023 | 5.0 |
|---|---|
| Q1 2024 | 5.0 |
| Q2 2024 | 5.0 |
| Q3 2024 | 5.0 |
| Q4 2024 | 5.0 |
| Q2 2025 | 5.0 |
| Q3 2025 | 5.0 |
| Q4 2025 | 5.0 |
| Q2 2026 | 5.0 |
Average rating stayed at 5.0 between Q4 2023 and Q2 2026.
| 5 star | 62 |
|---|---|
| 4 star | 2 |
| 3 star | 0 |
| 2 star | 1 |
| 1 star | 1 |
- Popup Wouldn’t stop showing in the dashboard · 2 stars · 13 Aug 2023
Security record
8 vulnerabilities on record, all patched (latest fixed in 1.1.3).
Show 8 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 27 Dec 2023 | WP Mail Log Plugin <= 1.1.2 - Authenticated(Contributor+) Arbitrary File Upload | 8.8 | < 1.1.3 | 1.1.3 | Before disclosure |
| 28 Nov 2023 | WP Mail Log <= 1.1.2 - Incorrect Authorization to Authenticated (Contributor+) Data Viewing and Deletion | 6.4 | <= 1.1.2 | 1.1.3 | Before disclosure |
| 28 Nov 2023 | WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL injection via key | 8.8 | <= 1.1.2 | 1.1.3 | Before disclosure |
| 28 Nov 2023 | WP Mail Log <= 1.1.2 - Authenticated (Contributor+) Arbitrary File Read | 6.5 | <= 1.1.2 | 1.1.3 | Before disclosure |
| 20 Nov 2023 | WP Mail Log <= 1.1.2 - Authenticated (Contributor+) SQL Injection via id | 7.2 | <= 1.1.2 | 1.1.3 | Before disclosure |
| 18 Jul 2023 | Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get | 6.1 | <= 1.0.2 | 1.1 | n/a |
| 5 Jul 2023 | WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email | 7.2 | <= 1.1.1 | 1.1.2 | Before disclosure |
| 2 Dec 2022 | WP Mail Log <= 1.0.1 - Cross-Site Request Forgery | 8.8 | <= 1.0.1 | 1.0.2 | 111 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 66 |
|---|---|
| 11 May 2026 | 217 |
| 18 May 2026 | 267 |
| 25 May 2026 | 202 |
| 1 Jun 2026 | 214 |
| 8 Jun 2026 | 170 |
| 15 Jun 2026 | 4,094 |
| 22 Jun 2026 | 1,087 |
| 29 Jun 2026 | 4,310 |
| 6 Jul 2026 | 1,859 |
| 13 Jul 2026 | 842 |
| 20 Jul 2026 | 887 |
| 27 Jul 2026 | 813 |
| 3 Aug 2026 | 773 |
| 10 Aug 2026 | 628 |
| 17 Aug 2026 | 600 |
| 24 Aug 2026 | 723 |
| 31 Aug 2026 | 569 |
| 7 Sep 2026 | 527 |
| 14 Sep 2026 | 600 |
| 21 Sep 2026 | 601 |
| 28 Sep 2026 | 570 |
| 5 Oct 2026 | 570 |
| 12 Oct 2026 | 517 |
| 19 Oct 2026 | 744 |
| 26 Oct 2026 | 602 |
| 2 Nov 2026 | 96 |
Weekly downloads over the last 4 weeks are 43% below the 27-week average.
Facts
| Version | 1.1.6 |
|---|---|
| Author | WPVibes |
| Added | 1 Sep 2009 |
| Last updated | 30 Jun 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 5.0 |
| Tested up to | 7.0.8 |
| Requires PHP | 7.4 |
| Category | Communication & Messaging > SMTP & Email Delivery Services |
| Tags | mail, email, mail log, email log, email logger |
Other plugins by this author: Addon Elements for Elementor (formerly, Dynific Addons for Elementor (formerly, Redirect 404 Error Page to Homepage or, Form Vibes, Frontend Product Editor for WooCommerce, Replace & Rename Media Files, MCP Tracker, Content Lifecycle Manager
Questions
Is WP Mail Log still maintained?
Yes. Last release 30 Jun 2026, 2 releases in the last 24 months.
Who owns WP Mail Log, and has it changed hands?
No change recorded. Main committer wpvibes since Feb 2021.
Was WP Mail Log removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is WP Mail Log safe?
8 known vulnerabilities, all fixed (latest in 1.1.3). Not on the exploited list.
Is the latest WP Mail Log update safe to install?
No ownership change before 1.1.6. No one-star spike after it.