WP Mail SMTP by WPForms
Healthy: maintained, last release 20 Oct 2026, 13 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 100 |
| Support | 71 |
| Reputation | 85 |
Quick answers
- Is WP Mail SMTP by WPForms still maintained?
- Yes. Last release 20 Oct 2026, 13 releases in the last 24 months. 20 Oct 2026 · wordpress.org
- Who owns WP Mail SMTP by WPForms, and has it changed hands?
- No change recorded. Main committer alexandersakal since Nov 2023. 3 Nov 2026 · SVN log
- Was WP Mail SMTP by WPForms removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is WP Mail SMTP by WPForms safe?
- 2 known vulnerabilities, all fixed (latest in 4.1.0). Not on the exploited list. 19 Jul 2024 · Wordfence Intelligence
- Is the latest WP Mail SMTP by WPForms update safe to install?
- No ownership change before 4.10.3. No one-star spike after it. 20 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| jaredatch | 30 Oct 2017 to 23 Mar 2019, 23 commits |
|---|---|
| slaFFik | 18 Dec 2017 to 3 Nov 2022, 44 commits |
| capuderg | 28 Oct 2020 to 30 Aug 2023, 25 commits |
| alexandersakal | 8 Nov 2023 to 20 Oct 2026, 19 commits |
| sixfingersam | 12 Nov 2025 to 12 Nov 2025, 1 commits |
5 committers recorded. No ownership change since 2007.
Maintenance
- Last release
- 15 days ago
- Releases, 24 months
- 13
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 2 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 2 |
| Q4 2024 | 2 |
| Q1 2025 | 1 |
| Q2 2025 | 1 |
| Q3 2025 | 1 |
| Q4 2025 | 2 |
| Q1 2026 | 0 |
| Q2 2026 | 2 |
| Q3 2026 | 1 |
| Q4 2026 | 3 |
Last release 20 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: 4.8 (30 reviews). Lifetime: 4.8.
Average rating rose from 4.8 to 5.0 between Q3 2026 and Q4 2026.
| 5 star | 4916 |
|---|---|
| 4 star | 70 |
| 3 star | 41 |
| 2 star | 26 |
| 1 star | 157 |
- Constantly disconnecting · 1 star · 27 Aug 2026
Security record
2 vulnerabilities on record, all patched (latest fixed in 4.1.0).
Show 2 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 19 Jul 2024 | WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure | 2.7 | <= 4.0.1 | 4.1.0 | Patched before disclosure |
| 19 Sep 2018 | WP Mail SMTP by WPForms <= 1.3.3 - Unspecified Cross-Site Scripting | 6.4 | < 1.4.0 | 1.4.0 | 72 |
Changelog mentions of security fixes: 4.10.0 (security); 4.10.1 (security).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
71% of 24 support threads resolved in the last 2 months.
Momentum
4,000,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 92,123 |
|---|---|
| 11 May 2026 | 174,121 |
| 18 May 2026 | 270,755 |
| 25 May 2026 | 174,483 |
| 1 Jun 2026 | 133,488 |
| 8 Jun 2026 | 130,094 |
| 15 Jun 2026 | 125,149 |
| 22 Jun 2026 | 1,247,466 |
| 29 Jun 2026 | 416,414 |
| 6 Jul 2026 | 381,024 |
| 13 Jul 2026 | 210,250 |
| 20 Jul 2026 | 212,550 |
| 27 Jul 2026 | 179,467 |
| 3 Aug 2026 | 159,373 |
| 10 Aug 2026 | 135,530 |
| 17 Aug 2026 | 135,095 |
| 24 Aug 2026 | 167,199 |
| 31 Aug 2026 | 137,569 |
| 7 Sep 2026 | 119,025 |
| 14 Sep 2026 | 119,755 |
| 21 Sep 2026 | 124,561 |
| 28 Sep 2026 | 1,420,165 |
| 5 Oct 2026 | 2,735,300 |
| 12 Oct 2026 | 400,630 |
| 19 Oct 2026 | 1,654,501 |
| 26 Oct 2026 | 507,336 |
| 2 Nov 2026 | 49,849 |
Weekly downloads over the last 4 weeks are 52% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 4.10.3 |
|---|---|
| Author | Syed Balkhi |
| Added | 12 Sep 2007 |
| Last updated | 20 Oct 2026 |
| Active installs | 4,000,000+ |
| Requires WordPress | 5.5 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Communication & Messaging > SMTP & Email Delivery Services |
| Tags | smtp, brevo, email, gmail, outlook |
Other plugins by this author: WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More, WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager, All in One SEO - AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights), Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & More, Smash Balloon Social Photo Feed - Easy Social Feeds Plugin, One Click Demo Import, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, WP Mail Logging, WP Crontrol, PDF Embedder - PDF Viewer & Embed PDF Files for WordPress, Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery
Questions
Is WP Mail SMTP by WPForms still maintained?
Yes. Last release 20 Oct 2026, 13 releases in the last 24 months.
Who owns WP Mail SMTP by WPForms, and has it changed hands?
No change recorded. Main committer alexandersakal since Nov 2023.
Was WP Mail SMTP by WPForms removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is WP Mail SMTP by WPForms safe?
2 known vulnerabilities, all fixed (latest in 4.1.0). Not on the exploited list.
Is the latest WP Mail SMTP by WPForms update safe to install?
No ownership change before 4.10.3. No one-star spike after it.