SAR Friendly SMTP Security & Risk Analysis

wordpress.org/plugins/sar-friendly-smtp

A friendly SMTP plugin for WordPress. No third-party, simply using WordPress native possibilities.

2K active installs v1.2.6 PHP 7.0+ WP 4.9+ Updated May 16, 2025
emailnotificationsphpmailersendmailsmtp
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is SAR Friendly SMTP Safe to Use in 2026?

Generally Safe

Score 100/100

SAR Friendly SMTP has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the sar-friendly-smtp plugin v1.2.6 exhibits a strong security posture. The code analysis reveals no dangerous functions, SQL queries are exclusively handled with prepared statements, and all output is properly escaped. Crucially, there are no identified taint flows or file operations, indicating a low risk of code injection or arbitrary file manipulation. The presence of nonce and capability checks on the single identified entry point further reinforces its security. The plugin also boasts a clean vulnerability history with zero known CVEs, suggesting a history of secure development and maintenance. However, it is important to note that the absence of any analysis results in certain categories (like taint analysis or attack surface details) might be due to the plugin's simplicity or limitations in the analysis tool's scope. While the current data points to a secure plugin, continuous vigilance and regular updates are always recommended for any software.

Vulnerabilities
None known

SAR Friendly SMTP Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

SAR Friendly SMTP Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
65 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped65 total outputs
Attack Surface

SAR Friendly SMTP Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionplugins_loadedsar-friendly-smtp.php:87
actionadmin_enqueue_scriptssar-friendly-smtp.php:97
actionphpmailer_initsar-friendly-smtp.php:117
actionadmin_menusar-friendly-smtp.php:188
actionadmin_initsar-friendly-smtp.php:189
actionadmin_initsar-friendly-smtp.php:675
Maintenance & Trust

SAR Friendly SMTP Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMay 16, 2025
PHP min version7.0
Downloads36K

Community Trust

Rating92/100
Number of ratings46
Active installs2K
Developer Profile

SAR Friendly SMTP Developer Profile

Samuel Aguilera

14 plugins · 98K total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect SAR Friendly SMTP

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/sar-friendly-smtp/css/sar-fsmtp-styles.css
Version Parameters
sar-friendly-smtp/css/sar-fsmtp-styles.css?ver=

HTML / DOM Fingerprints

HTML Comments
<!-- This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License version 3 as published by the Free Software Foundation. --><!-- This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. --><!-- You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>. -->
FAQ

Frequently Asked Questions about SAR Friendly SMTP