Magic API Email Security & Risk Analysis

wordpress.org/plugins/magic-api-email

Send WordPress emails through a transactional API provider: Resend, Mailgun, Postmark, or Mailtrap. No SMTP needed.

0 active installs v1.1.0 PHP 8.0+ WP 6.0+ Updated Mar 27, 2026
emailmailgunpostmarkresendsmtp
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Magic API Email Safe to Use in 2026?

Generally Safe

Score 100/100

Magic API Email has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "magic-api-email" plugin version 1.1.0 demonstrates a strong security posture based on the provided static analysis. The plugin has a minimal attack surface with only one AJAX handler, and importantly, this entry point is protected by security checks, indicated by 0 unprotected entry points. The code follows best practices by exclusively using prepared statements for all SQL queries and properly escaping all output. Furthermore, there are no file operations or critical taint analysis findings, suggesting that user input is not being handled in ways that could lead to common web vulnerabilities like directory traversal or SQL injection.

Key Concerns

  • One AJAX handler is present
  • 5 external HTTP requests
Vulnerabilities
None known

Magic API Email Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Magic API Email Release Timeline

v1.1.0Current
v1.0.12
v1.0.11
v1.0.10
v1.0.9
v1.0.8
Code Analysis
Analyzed Apr 16, 2026

Magic API Email Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
9 prepared
Unescaped Output
0
102 escaped
Nonce Checks
1
Capability Checks
2
File Operations
0
External Requests
5
Bundled Libraries
0

SQL Query Safety

100% prepared9 total queries

Output Escaping

100% escaped102 total outputs
Attack Surface

Magic API Email Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_magic_api_send_test_emailincludes/class-magic-api-email-test.php:21
WordPress Hooks 5
actionadmin_initincludes/class-magic-api-email-logger.php:33
filterpre_wp_mailincludes/class-magic-api-email-sender.php:40
actionadmin_menuincludes/class-magic-api-email-settings.php:44
actionadmin_initincludes/class-magic-api-email-settings.php:45
actionadmin_enqueue_scriptsincludes/class-magic-api-email-settings.php:46
Maintenance & Trust

Magic API Email Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 27, 2026
PHP min version8.0
Downloads396

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Magic API Email Developer Profile

MagicWP.io

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Magic API Email

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/magic-api-email/assets/css/admin.css
Version Parameters
magic-api-email/assets/css/admin.css?ver=

HTML / DOM Fingerprints

Data Attributes
data-settingdata-provider
FAQ

Frequently Asked Questions about Magic API Email