WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin Security & Risk Analysis

The "wp-mail-smtp" v4.7.1 plugin demonstrates a generally good security posture with strong adherence to secure coding practices. The high percentage of prepared statements for SQL queries and properly escaped output are positive indicators. Nonce and capability checks are also utilized extensively, suggesting a solid defense against common WordPress attacks. The absence of critical or high-severity vulnerabilities in its history, and currently no unpatched CVEs, further bolster this assessment. The plugin also benefits from bundling the Guzzle library, which is a well-regarded HTTP client.

However, there are notable areas of concern that warrant attention. The static analysis revealed 3 AJAX handlers that lack authentication checks, presenting a potential attack surface for unauthorized actions. While taint analysis did not uncover critical or high-severity flows, the presence of one flow with unsanitized paths is a flag that requires investigation and remediation. The plugin's vulnerability history, while not critical, includes past issues related to storing passwords in a recoverable format and cross-site scripting, indicating a need for continuous vigilance and robust testing to prevent recurrence.

In conclusion, "wp-mail-smtp" v4.7.1 exhibits strengths in its implementation of secure coding standards and a commendable vulnerability history with no active critical threats. Nevertheless, the unprotected AJAX endpoints and the identified unsanitized path flow represent specific risks that need to be addressed to maintain a high level of security. Ongoing monitoring and prompt patching of any future vulnerabilities are crucial for this plugin.