WP SMTP Config Security & Risk Analysis

wordpress.org/plugins/wp-smtp-config

Configure an external SMTP server in your config file.

200 active installs v1.2.0 PHP + WP 3.0+ Updated Nov 12, 2018
emailmailphpmailersmtpssl
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is WP SMTP Config Safe to Use in 2026?

Generally Safe

Score 85/100

WP SMTP Config has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The "wp-smtp-config" v1.2.0 plugin exhibits an exceptionally strong security posture based on the provided static analysis and vulnerability history. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events significantly minimizes its attack surface, and crucially, there are no unprotected entry points. Furthermore, the code demonstrates excellent security practices by avoiding dangerous functions, utilizing prepared statements for all SQL queries, ensuring all output is properly escaped, and refraining from file operations or external HTTP requests. The lack of any logged vulnerabilities, historical or current, further reinforces this positive assessment. The plugin appears to be meticulously developed with security as a primary consideration, showcasing a robust defense against common web vulnerabilities.

Vulnerabilities
None known

WP SMTP Config Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

WP SMTP Config Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
8 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped8 total outputs
Attack Surface

WP SMTP Config Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actionphpmailer_initwp-smtp-config.php:63
actionnetwork_admin_menuwp-smtp-config.php:139
actionadmin_menuwp-smtp-config.php:141
Maintenance & Trust

WP SMTP Config Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedNov 12, 2018
PHP min version
Downloads16K

Community Trust

Rating60/100
Number of ratings2
Active installs200
Developer Profile

WP SMTP Config Developer Profile

pCoLaSD

1 plugin · 200 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect WP SMTP Config

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes
smtp-messageicon32optiontableform-table
Data Attributes
id="smtp-message"id="icon-options-general"id="smtp_recipient"name="smtp_recipient"name="smtp_submit"
FAQ

Frequently Asked Questions about WP SMTP Config