Plugin Auditor is now available inside WordPress. Download Ultimate Auditor

WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin v4.9.0

WP Mail SMTP is a WordPress plugin that routes outgoing site email through an SMTP or API-based mail service and logs sent messages to improve email deliverability.

Plugin Auditor is an independent service and is not affiliated with, endorsed by, or sponsored by WP Mail SMTP by WPForms or its developer. Disclaimer.

  • Audit coverage Up to date 30 versions audited
  • On Plugin Auditor since Aug 31, 2026
  • Last audited Aug 31, 2026

Compatibility & requirements

The PHP and WordPress versions this plugin needs, and how current its version support is.

  • Requires PHP 7.4+
  • Requires WordPress 5.5+
  • Tested up to WP 7.0 WP 7.1.3 is current
  • Version adoption 44% run the current version

Audit scores by category

125 checks

How this plugin scores across the six areas we audit, from security to accessibility.

  • 94 Passed
  • 25 Warnings
  • 6 Failed
Security 73/100
Needs Improvement

27 of 37 checks passed.

Code Quality 89/100
Good

54 of 61 checks passed.

Performance 50/100
Needs Improvement

6 of 12 checks passed.

Compatibility 50/100
Needs Improvement

3 of 6 checks passed.

Privacy 67/100
Needs Improvement

2 of 3 checks passed.

Accessibility 33/100
Poor

2 of 6 checks passed.

Code footprint

How much code ships in this plugin, and the file types that make it up.

View in detail

ZIP file size

3.7 MB

8.4 MB unzipped

Total files

879

across all file types

Lines of PHP

96,769

in 477 files Large

File types

  • PHP
  • SVG
  • PNG
  • JS
  • Other

Top issues

The most important findings from the latest audit, ordered by severity.

  • 1 Critical
  • 29 High
  • 208 Medium
  • 67 Low

This is a preview of notable findings. Full file-level results, line numbers and code context are in the scan.

View full report

How scores changed across versions

Across 30 audited versions of WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin, Security improved the most (+8). No category regressed over this span. The codebase shrank 55% in size.

Audited 3.0.2 → 4.9.0 · 30 versions

0 50 100 3.0.2 3.6.1 4.1.1 4.9.0

How issues changed across versions

Findings by severity for each audited version, so you can see which issues were fixed over time.

0 183 365 3.0.2 3.6.1 4.1.1 4.9.0

Download momentum

How fast this plugin is being installed lately, and whether that pace is rising or slowing.

Last 7 days

136,462

downloads

Today

11,314

downloads

Week over week

−15%

vs previous week

Month over month

−67%

vs previous month

Download trend: Declining. Abandonment risk: None.

Version intelligence

56% of installs run an older version

≈ 2.2M+ sites on a lower-scoring version.

  • Other
  • v4.7
  • v4.8
  • v4.9

Ratings

5,173 ratings on WordPress.org

  • 5 4,880
  • 4 69
  • 3 41
  • 2 26
  • 1 157

Support: 26 / 28 threads resolved in the last two months

Maintenance & history

How actively this plugin is kept up, from its last update to its release history.

Last updated

2 mo ago

Jun 25, 2026

Actively maintained

Release cadence

~ every 34 days

average between releases

Total releases

98

since Sep 2007 · 19 yrs

Contributors & developers

The people credited with building and maintaining this plugin.

Running WP Mail SMTP by WPForms in Your Site?

Our latest audit of WP Mail SMTP by WPForms v4.9.0 flagged 305 issues. Scan your own copy to see each one with its exact file, line number, and a recommended fix.

WP Mail SMTP by WPForms and its trademarks are used only to identify the plugin analyzed and remain the property of their owners. This is an independent Plugin Auditor audit, not affiliated with, sponsored by, or endorsed by the plugin's developer. Metadata may come from WordPress.org; scores, findings, classifications, and visualizations are independently generated by Plugin Auditor. Full disclaimer.