Skip to content
PluginCanary

YaySMTP

YaySMTP - WP Mail SMTP with Email Logs, Tracking & Reports
by YayCommerce · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 1 Nov 2026, 21 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for YaySMTP
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is YaySMTP still maintained?
Yes. Last release 1 Nov 2026, 21 releases in the last 24 months. 1 Nov 2026 · wordpress.org
Who owns YaySMTP, and has it changed hands?
No change recorded. Main committer yaycommerce since Dec 2020. 4 Nov 2026 · SVN log
Was YaySMTP removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is YaySMTP safe?
9 known vulnerabilities, all fixed (latest in 2.7.8). Not on the exploited list. 15 Oct 2026 · Wordfence Intelligence
Is the latest YaySMTP update safe to install?
No ownership change before 2.7.9. No one-star spike after it. 1 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master8 Dec 2020 to 8 Dec 2020, 1 commits
yaycommerce10 Dec 2020 to 1 Nov 2026, 153 commits
yaydev5 Jan 2026 to 5 Mar 2026, 4 commits

3 committers recorded. No ownership change since 2020.

Maintenance

Last release
3 days ago
Releases, 24 months
21
Tested up to
7.1 current
Requires PHP
5.4 supported 8.2+
Releases per quarter
Releases per quarter for YaySMTP
Q1 20241
Q2 20241
Q3 20240
Q4 20242
Q1 20251
Q2 20252
Q3 20254
Q4 20254
Q1 20263
Q2 20261
Q3 20262
Q4 20262

Last release 1 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.9.

Average rating per quarter for YaySMTP
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20244.5
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0

Average rating stayed at 5.0 between Q1 2024 and Q2 2026.

Rating distribution
5 star42
4 star2
3 star0
2 star0
1 star1
Latest low reviews

Security record

4 vulnerabilities in 24 months (9 on record), all patched (latest fixed in 2.7.8).

Show 9 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename Extension8.8<= 2.7.72.7.8Patched before disclosure
27 Jun 2025YaySMTP <= 2.6.6 - Authenticated (Administrator+) SQL Injection4.9<= 2.6.62.6.753
7 May 2025YaySMTP <= 2.6.4 - Authenticated (Administrator+) SQL Injection4.9<= 2.6.42.6.557
18 Feb 2025YaySMTP 2.4.9 - 2.6.3 - Unauthenticated Stored Cross-Site Scripting7.22.4.9 to 2.6.32.6.478
12 Jun 2023YaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via Email7.2<= 2.4.52.4.6Patched before disclosure
18 Jul 2022YaySMTP - Simple WP SMTP Mail <= 2.2 - Stored Cross-Site Scripting6.4< 2.2.12.2.1n/a
15 Jul 2022YaySMTP - Simple WP SMTP Mail <= 2.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting5.5<= 2.2.12.2.2n/a
11 Jul 2022YaySMTP - Simple WP SMTP Mail <= 2.2 - Missing Authorization to Sensitive Information Exposure6.5<= 2.22.2.1n/a
11 Jul 2022YaySMTP - Simple WP SMTP Mail <= 2.2 - Sensitive Information Disclosure7.52.22.2.1n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for YaySMTP
4 May 2026199
11 May 2026387
18 May 2026821
25 May 2026338
1 Jun 2026322
8 Jun 2026328
15 Jun 20264,402
22 Jun 2026995
29 Jun 2026725
6 Jul 20264,870
13 Jul 20261,130
20 Jul 2026885
27 Jul 2026767
3 Aug 2026692
10 Aug 2026493
17 Aug 2026504
24 Aug 2026497
31 Aug 2026460
7 Sep 2026465
14 Sep 20265,257
21 Sep 20261,386
28 Sep 2026786
5 Oct 2026787
12 Oct 20265,611
19 Oct 20261,423
26 Oct 20261,627
2 Nov 20263,632

Weekly downloads over the last 4 weeks are 109% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Stop WP Emails Going to SpamScore 100 · 10,000+SendWPScore 100 · 10,000+WP Offload SES LiteScore 100 · 10,000+GoSMTPScore 98 · 500,000+Gmail SMTPScore 98 · 10,000+

Facts

Version2.7.9
AuthorYayCommerce
Added10 Dec 2020
Last updated1 Nov 2026
Active installs10,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHP5.4
CategoryCommunication & Messaging > SMTP & Email Delivery Services
Tagssmtp, wp-mail, email log, gmail smtp, WP Mail SMTP

Other plugins by this author: YayMail - WooCommerce Email Customizer, YayCurrency - WooCommerce Multi-Currency Switcher, YayPricing - WooCommerce Dynamic Pricing & Discounts, SMTP for Amazon SES - YaySMTP, SMTP for SendGrid - YaySMTP, YayExtra - WooCommerce Extra Product Options, YaySwatches - Variation Swatches for WooCommerce, Brevo SMTP - YaySMTP, YayReviews - Advanced Customer Reviews for WooCommerce, Brandy Blocks, YayBoost - Sales Booster for WooCommerce, Brandy Sites - 20+ WooCommerce Website Starter Templates

Questions

Is YaySMTP still maintained?

Yes. Last release 1 Nov 2026, 21 releases in the last 24 months.

Who owns YaySMTP, and has it changed hands?

No change recorded. Main committer yaycommerce since Dec 2020.

Was YaySMTP removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is YaySMTP safe?

9 known vulnerabilities, all fixed (latest in 2.7.8). Not on the exploited list.

Is the latest YaySMTP update safe to install?

No ownership change before 2.7.9. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue