WP SendGrid SMTP
Avoid: vulnerability published 12 Sep 2025 still has no fix after 14 days.
Based on 3 of 5 areas
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | No data |
| Reputation | No data |
Active signals
Open issues right now, with links to the source.
- CriticalSEC-2Vulnerability published 12 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.26 Sep 2025Evidence
- CriticalMNT-1No release in 99 months (last release 21 Aug 2018). Plan a replacement if the plugin is important to your site.21 Aug 2019Evidence
- WarningMNT-2Tested up to WordPress 4.9.35, 22 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
History: 1 past vulnerability, 1 still unpatched in the current version. Patched issues are listed in the Security record, not here.
Quick answers
- Is WP SendGrid SMTP still maintained?
- No. Last release 21 Aug 2018, over 8 years ago. 21 Aug 2018 · wordpress.org
- Who owns WP SendGrid SMTP, and has it changed hands?
- No change recorded. 3 Nov 2026 · SVN log
- Was WP SendGrid SMTP removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is WP SendGrid SMTP safe?
- No. 1 known vulnerability has no fix in the current version. 12 Sep 2025 · Wordfence Intelligence
- Is the latest WP SendGrid SMTP update safe to install?
- No ownership change before 1.0.6. No one-star spike after it. 21 Aug 2018 · Release history
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
No ownership changes recorded since 2016.
Maintenance
- Last release
- 8 years ago
- Releases, 24 months
- 0
- Tested up to
- 4.9 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 21 Aug 2018. Tested up to 4.9, 22 major versions behind WordPress 7.1.
Support
- Resolved, last 2 months
- n/a
- Threads, last 2 months
- 0
Trend appears after 8 weekly snapshots.
Security record
1 vulnerability in 24 months, 1 with no fix in the current version.
| Date | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 12 Sep 2025 | Unauthenticated Information Exposure | 5.3 | <= 1.0.6 | No fix | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Reputation
Last 90 days: no reviews. Lifetime: 5.0.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 5.0 |
| 5 star | 3 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Momentum
- Active installs
- 900+
Momentum history builds with each snapshot.
Facts
- Version
- 1.0.6
- Author
- inkthemes
- Added
- 7 Oct 2016
- Last updated
- 21 Aug 2018
- Active installs
- 900+
- Requires WordPress
- 3.0.1
- Tested up to
- 4.9.35
- Requires PHP
- not stated
- Category
- Communication & Messaging > SMTP & Email Delivery Services
- Tags
- smtp, sendgrid smtp, wp sendgrid smtp, sendgrid protocol
Other plugins by this author: WP Gmail SMTP, WP Mailgun SMTP, WP Hotmail SMTP, WP Yahoo SMTP
Questions about WP SendGrid SMTP
Is WP SendGrid SMTP still maintained?
No. Last release 21 Aug 2018, over 8 years ago.
Who owns WP SendGrid SMTP, and has it changed hands?
No change recorded.
Was WP SendGrid SMTP removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is WP SendGrid SMTP safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest WP SendGrid SMTP update safe to install?
No ownership change before 1.0.6. No one-star spike after it.