Plugin icon

WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin

wp-mail-smtp

Vulnerabilities:

2

Last Updated:

November 26, 2025

Active Installs:

4000000

Published
Title
Fixed in
CVSS
Published
2024-07-19
Title
WP Mail SMTP < 4.1.0 - Admin+ SMTP Password Exposure
Fixed in
Fixed in 4.1.0
CVSS
2.7 (low)
Published
2018-12-02
Title
WP Mail SMTP by WPForms < 1.4.0 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.4.0
CVSS
n/a