Plugin icon

WP Mail SMTP by WPForms – Free SMTP Plugin with Gmail, Outlook, Amazon SES, SendGrid, Mailgun, Zoho & other SMTP

wp-mail-smtp

Vulnerabilities:

2

Last Updated:

October 8, 2026

Active Installs:

4000000

Published
Title
Fixed in
CVSS
Published
2024-07-19
Title
WP Mail SMTP < 4.1.0 - Admin+ SMTP Password Exposure
Fixed in
Fixed in 4.1.0
CVSS
2.7 (low)
Published
2018-12-02
Title
WP Mail SMTP by WPForms < 1.4.0 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.4.0
CVSS
n/a