WP Mailgun SMTP
Avoid: vulnerability published 12 Sep 2025 still has no fix after 14 days.
Based on 3 of 5 areas
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 30 |
| Support | No data |
| Reputation | No data |
Active signals
Open issues right now, with links to the source.
- CriticalSEC-2Vulnerability published 12 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.26 Sep 2025Evidence
- CriticalSEC-2Vulnerability published 21 Aug 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.4 Sep 2025Evidence
- CriticalMNT-1No release in 99 months (last release 21 Aug 2018). Plan a replacement if the plugin is important to your site.21 Aug 2019Evidence
- WarningMNT-2Tested up to WordPress 4.9.35, 22 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
History: 2 past vulnerabilities, 2 still unpatched in the current version. Patched issues are listed in the Security record, not here.
Quick answers
- Is WP Mailgun SMTP still maintained?
- No. Last release 21 Aug 2018, over 8 years ago. 21 Aug 2018 · wordpress.org
- Who owns WP Mailgun SMTP, and has it changed hands?
- No change recorded. 3 Nov 2026 · SVN log
- Was WP Mailgun SMTP removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is WP Mailgun SMTP safe?
- No. 2 known vulnerabilities have no fix in the current version. 12 Sep 2025 · Wordfence Intelligence
- Is the latest WP Mailgun SMTP update safe to install?
- No ownership change before 1.0.7. No one-star spike after it. 21 Aug 2018 · Release history
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
No ownership changes recorded since 2016.
Maintenance
- Last release
- 8 years ago
- Releases, 24 months
- 0
- Tested up to
- 4.9 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 21 Aug 2018. Tested up to 4.9, 22 major versions behind WordPress 7.1.
Support
- Resolved, last 2 months
- n/a
- Threads, last 2 months
- 0
Trend appears after 8 weekly snapshots.
Security record
2 vulnerabilities in 24 months, 2 with no fix in the current version.
| Date | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 12 Sep 2025 | Unauthenticated Information Exposure | 5.3 | <= 1.0.7 | No fix | n/a |
| 21 Aug 2025 | Missing Authorization | 5.3 | <= 1.0.7 | No fix | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Reputation
Last 90 days: no reviews. Lifetime: 1.0.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 1.0 |
| 5 star | 0 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 1 |
Momentum
- Active installs
- 800+
Momentum history builds with each snapshot.
Facts
- Version
- 1.0.7
- Author
- inkthemes
- Added
- 3 Oct 2016
- Last updated
- 21 Aug 2018
- Active installs
- 800+
- Requires WordPress
- 3.0.1
- Tested up to
- 4.9.35
- Requires PHP
- not stated
- Category
- Communication & Messaging > SMTP & Email Delivery Services
- Tags
- smtp, mailgun smtp, wp mailgun smtp, mailgun protocol
Other plugins by this author: WP Gmail SMTP, WP SendGrid SMTP, WP Hotmail SMTP, WP Yahoo SMTP
Questions about WP Mailgun SMTP
Is WP Mailgun SMTP still maintained?
No. Last release 21 Aug 2018, over 8 years ago.
Who owns WP Mailgun SMTP, and has it changed hands?
No change recorded.
Was WP Mailgun SMTP removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is WP Mailgun SMTP safe?
No. 2 known vulnerabilities have no fix in the current version.
Is the latest WP Mailgun SMTP update safe to install?
No ownership change before 1.0.7. No one-star spike after it.