CL Simplest SMTP Security & Risk Analysis

wordpress.org/plugins/cl-simplest-smtp

Send mails throught SMTP server. Simplest option to send mail when hosting or server do not permits send mail or is missconfigured.

20 active installs v1.2.3 PHP 7.4+ WP 5.0+ Updated Feb 25, 2026
debugmailsmtpsystem
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is CL Simplest SMTP Safe to Use in 2026?

Generally Safe

Score 100/100

CL Simplest SMTP has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The 'cl-simplest-smtp' plugin v1.2.3 exhibits a generally strong security posture based on the provided static analysis. The absence of any recorded CVEs, critical or high-severity taint flows, direct SQL queries, or a significant attack surface with unprotected entry points are all positive indicators. The plugin also demonstrates good practices in output escaping and utilizes nonce checks and capability checks, which are crucial for preventing common WordPress vulnerabilities.

Key Concerns

  • Minor unescaped output detected
  • File operations present without explicit detail
Vulnerabilities
None known

CL Simplest SMTP Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

CL Simplest SMTP Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
10
69 escaped
Nonce Checks
4
Capability Checks
1
File Operations
3
External Requests
0
Bundled Libraries
0

Output Escaping

87% escaped79 total outputs
Data Flows
All sanitized

Data Flow Analysis

3 flows
handle_log_deletion (includes\cl-simplest-functions.php:448)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

CL Simplest SMTP Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionplugins_loadedcl-simplest-smtp.php:53
actionphpmailer_initcl-simplest-smtp.php:63
actionadmin_noticescl-simplest-smtp.php:65
actionadmin_enqueue_scriptscl-simplest-smtp.php:81
actionadmin_menuincludes\cl-simplest-functions.php:105
actionadmin_initincludes\cl-simplest-functions.php:113
actionadmin_initincludes\cl-simplest-functions.php:515
Maintenance & Trust

CL Simplest SMTP Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 25, 2026
PHP min version7.4
Downloads2K

Community Trust

Rating100/100
Number of ratings4
Active installs20
Developer Profile

CL Simplest SMTP Developer Profile

Carlos Longarela

2 plugins · 120 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect CL Simplest SMTP

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/cl-simplest-smtp/assets/css/smtp-styles.css/wp-content/plugins/cl-simplest-smtp/assets/js/smtp-scripts.js
Script Paths
assets/js/smtp-scripts.js
Version Parameters
cl-simplest-smtp/assets/css/smtp-styles.css?ver=cl-simplest-smtp/assets/js/smtp-scripts.js?ver=

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about CL Simplest SMTP