Was WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin Hacked?
No Publicly Reported Incidents. As of May 2026, WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin has no publicly reported security breaches, hacks, or CVE entries in the databases Nerq monitors. This covers the National Vulnerability Database (NVD), GitHub Security Advisories, and OSV.dev. Nerq's automated security analysis rates WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin's security posture as strong (security dimension score: 90/100). Trust Score: 76/100 (B+). Last checked: 2026-04-30.
Security Incident Summary
| CVE Count | 0 |
|---|---|
| Critical CVEs | 0 |
| Breach Status | No Publicly Reported Incidents |
| Trust Score | 76/100 (B+) |
| Security Dimension | 90/100 |
| Publisher | Syed Balkhi |
| Registry | N/A |
What We Check
- National Vulnerability Database (NVD) — CVE entries for publicly disclosed vulnerabilities
- GitHub Security Advisories — security alerts for open-source dependencies
- OSV.dev — Google's open-source vulnerability database
- Public breach reports — media reports and incident disclosures
Full Trust Analysis
For a complete safety assessment including privacy, maintenance, and community trust signals, see WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin Trust Score on Nerq.
FAQ
Updated May 2026. Trust scores based on automated analysis.