WP-Safety

Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails Security & Risk Analysis

wordpress.org/plugins/ultimate-email-validator

Enhance Website Security: Stop Fake, Temporary, and Disposable Emails Across Registration, Contact Form 7, Mailchimp, Woocommerce, and More!

10 active installs v2.2.0 PHP 5.6+ WP 5.3+ Updated Unknown
disposable-emailemail-validationfake-emailtemporary-emailvalidate-email
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails Safe to Use in 2026?

Generally Safe

Score 100/100

Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The "ultimate-email-validator" v2.2.0 plugin exhibits a generally strong security posture, particularly in its handling of SQL queries and output escaping, with a high percentage of outputs properly escaped. The plugin also demonstrates good practice by including nonce and capability checks. The absence of known CVEs and a clean vulnerability history further contribute to its positive security standing. The static analysis shows a very limited attack surface with no identified entry points without authentication checks, which is a significant strength.

Key Concerns

  • External HTTP requests present
  • Bundled Freemius v1.0 library may be outdated
  • Bundled Select2 library may be outdated
Vulnerabilities
None known

Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
85
582 escaped
Nonce Checks
2
Capability Checks
3
File Operations
0
External Requests
2
Bundled Libraries
2

Bundled Libraries

Select2Freemius1.0

Output Escaping

87% escaped667 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<ajax-operations> (includes\ajax-operations.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 36
actionadmin_initadmin-panel\adminpanel-backend-factory.php:135
actionadmin_menuadmin-panel\adminpanel-manager.php:133
actionnetwork_admin_menuadmin-panel\adminpanel-manager.php:134
filterplugin_row_metaincludes\engine.php:198
actionplugins_loadedincludes\engine.php:210
actionafter_setup_themeincludes\engine.php:217
actioninitincludes\engine.php:225
actionwpincludes\engine.php:240
actionadmin_noticesincludes\engine.php:250
actionnetwork_admin_noticesincludes\engine.php:252
actionadmin_noticesincludes\engine.php:254
filteradmin_footer_textincludes\engine.php:268
filteris_emailincludes\forms-validator\filter-wp-functions.php:85
filteris_email_address_unsafeincludes\forms-validator\filter-wp-functions.php:90
actionpre_comment_on_postincludes\forms-validator\form-wp-comment.php:96
actioncomment_postincludes\forms-validator\form-wp-comment.php:97
filteris_emailincludes\forms-validator\form-wp-comment.php:109
filterregistration_errorsincludes\forms-validator\form-wp-registration.php:99
filterwpmu_validate_user_signupincludes\forms-validator\form-wp-registration.php:102
filteris_emailincludes\forms-validator\form-wp-user-update-profile.php:117
actionuser_profile_update_errorsincludes\forms-validator\form-wp-user-update-profile.php:128
actioncurrent_screenincludes\forms-validator\form-wp-user-update-profile.php:141
filterwpmu_validate_user_signupincludes\forms-validator\form-xlib-buddypress.php:77
filterbp_core_validate_user_signupincludes\forms-validator\form-xlib-buddypress.php:80
filterwpcf7_validate_emailincludes\forms-validator\form-xlib-cf7.php:76
filterwpcf7_validate_email*includes\forms-validator\form-xlib-cf7.php:77
filtergform_field_validationincludes\forms-validator\form-xlib-gravityforms.php:75
filtermc4wp_form_messagesincludes\forms-validator\form-xlib-mailchimp.php:84
filtermc4wp_form_errorsincludes\forms-validator\form-xlib-mailchimp.php:87
filterninja_forms_submit_dataincludes\forms-validator\form-xlib-ninjaforms.php:81
filterwoocommerce_process_registration_errorsincludes\forms-validator\form-xlib-woocommerce.php:98
actionwoocommerce_save_account_details_errorsincludes\forms-validator\form-xlib-woocommerce.php:104
actionwpmu_new_blogincludes\ignition-helper.php:79
actionadmin_noticesultimate-email-validator.php:240
actionnetwork_admin_noticesultimate-email-validator.php:241
actionadmin_initultimate-email-validator.php:242
Maintenance & Trust

Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails Maintenance & Trust

Maintenance Signals

WordPress version tested6.3.8
Last updatedUnknown
PHP min version5.6
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Alternatives

Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails Alternatives

Block Temporary Email

Block Temporary Email

block-temporary-email

A
100

This plugin stops users from giving you disposable or fake email addresses when signing up. This helps reduce spam and fraud.

500 No CVEs
Temp Mail Detector – Block Temporary Emails

Temp Mail Detector – Block Temporary Emails

temp-mail-detector-block-temporary-emails

A
100

Detect and block temporary emails from registering on your website using the Temp Mail Detector plugin.

0 No CVEs
Email Blocklist

Email Blocklist

email-blocklist

A
100

Keep your WordPress site clean by blocking signups and comments from temporary or disposable email domains. 100% free, no paid APIs.

10 No CVEs
Antideo Email Validator

Antideo Email Validator

antideo-email-validator

A
97

Form email validation, Email Blacklist, Domain Blacklist, Form email check, Real time email validator Requires at least: 4.7 Tested up to: 6.9.

900 1 CVE
Reoon Email Verifier

Reoon Email Verifier

reoon-email-verifier

A
99

Safeguard your online forms against invalid, temporary, disposable, and harmful email addresses with real-time verification.

600 1 CVE
Developer Profile

Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails Developer Profile

Oxibug

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ultimate-email-validator/admin/css/settings.css/wp-content/plugins/ultimate-email-validator/admin/css/settings-dark-theme.css/wp-content/plugins/ultimate-email-validator/admin/js/settings.js/wp-content/plugins/ultimate-email-validator/admin/js/admin-script.js/wp-content/plugins/ultimate-email-validator/public/css/style.css/wp-content/plugins/ultimate-email-validator/public/js/main.js
Script Paths
/wp-content/plugins/ultimate-email-validator/admin/js/settings.js/wp-content/plugins/ultimate-email-validator/admin/js/admin-script.js/wp-content/plugins/ultimate-email-validator/public/js/main.js
Version Parameters
ultimate-email-validator/admin/css/settings.css?ver=ultimate-email-validator/admin/css/settings-dark-theme.css?ver=ultimate-email-validator/admin/js/settings.js?ver=ultimate-email-validator/admin/js/admin-script.js?ver=ultimate-email-validator/public/css/style.css?ver=ultimate-email-validator/public/js/main.js?ver=

HTML / DOM Fingerprints

CSS Classes
ultiemvld_main_settings_page
Data Attributes
data-ultiemvld-nonce
JS Globals
ultiemvld_admin_obj
FAQ

Frequently Asked Questions about Ultimate Email Validator – Validate and Stop Fake, Temporary and Disposable Emails