GoSMTP – SMTP for WordPress

GoSMTP – SMTP for WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 6.3 out of 10.

The most common weakness is Improper Privilege Management, behind 1 of the records (100%).

The one issue recorded for GoSMTP – SMTP for WordPress has a vendor fix available, so running the current release closes it.

All of these findings were reported by Charles Vosburgh. GoSMTP – SMTP for WordPress is installed on roughly 500,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all GoSMTP – SMTP for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.3CVE-2026-111577

GoSMTP – SMTP for WordPress < 1.2.5 - Authenticated (Custom Role+) Privilege Escalation

Read the full analysis

Vulnerability Records

1 records
GoSMTP – SMTP for WordPress banner
Latestv1.2.5

GoSMTP – SMTP for WordPress

Softaculous

Author

Softaculous

4.3(10)
86/100
Last Updated
2026-10-21 (8d ago)
Active Installs
500,000+
Downloads
2,941,841
Requires WP
5.5+
Requires PHP
5.5+
Tested up to
WP 7.1.4
Created
2023-02-20 (4y ago)

GoSMTP allows you to send emails from your WordPress over SMTP or many of the popular email sending services. Many web hosting companies have strict mail sending rules and limitations which restrict email deliverability. With GoSMTP, you will not be using your hosting providers PHP email but rather sending emails over SMTP or using API’s of various email providers. GoSMTP supports many of your preferred SMTP provider(s) : 1) SMTP.com 2) Sendinblue 3) Mailgun 4) Sendgrid 5) Sparkpost 6) Sendlayer 7) Postmark 8) Maileroo 9) ElasticEmail (Pro) 10) SMTP2Go (Pro) 11) Gmail, Gsuite, Google Workspace (Pro) 12) Outlook / Office 365 (Pro) 13) AWS (Pro) 14) Zoho (Pro) 15) Resend (Pro) 16) MailerSend (Pro) 17) Or any custom SMTP provider WordPress uses the PHP mail function to send emails generated by WordPress. The PHP mail function sends emails over the IP of your hosting provider’s servers which can have a bad reputation and be blacklisted by many email providers like Gmail, Yahoo, Office 365, Zoho, etc. causing your WordPress originated emails to land in the SPAM folder of your users. By using GoSMTP you ensure that your emails reach the inbox of your user(s). You can find our official documentation on our Website GoSMTP.net We are also active in our community support forums on wordpress.org if you are one of our free users. Our Premium Support Ticket System is at https://softaculous.deskuss.com/open.php?topicId=17 Home Page | Support | Documents AI Abilities GoSMTP exposes a set of AI Abilities via the WordPress Abilities API, enabling AI clients, assistants, and MCP (Model Context Protocol) adapters to securely interact with your email sending infrastructure. Free Abilities Get GoSMTP Settings: Returns global configuration settings such as from email, from name, force flags, return path, and logging toggles. Sensitive credentials are never exposed. List Configured Mailers: Lists all configured SMTP connections along with their nicknames, mailer types, and backup connections. Send a Test Email: Sends a test email through the configured mailer to verify connection settings and reports the execution result. Pro Abilities Export Email Logs (CSV): Exports email logs matching specified filters directly as a CSV string format for reporting and analysis. List Email Logs: Returns a paginated list of logged emails including status, mailer provider, timestamp, and recipient details. Get Email Log Details: Returns full details of a single email log entry, including body content, header info, and delivery response. Resend an Email Log: Re-sends a previously logged email directly from the logs, optionally allowing dispatch to a new recipient. Get Email Sending Report: Returns an aggregated report including total sent/failed counts, overall success rate, and daily performance breakdown. GoSMTP PRO GoSMTP Pro has many other powerful features and services. Click here to purchase now ! : Email Logs With Email Logging you view all emails sent from your site. This is necessary to keep email records and for auditing outgoing emails. Its also helpful to debug any outgoing email issues. Resend Emails You can resend any email, from the email log wizard. You can also resend multiple emails in bulk. Notifications You can get notified about failed email delivery on your configured channel, we currently support Mail, Slack and Discord. Smart Routing Smart Routing dynamically selects SMTP providers based on content, isolating transactional alerts from marketing to ensure critical emails bypass filters. Premium Features Forward Emails Email Reports Notifications Resend Email Smart Routing Coming Soon Track Email Views Track Clicks Print Emails Multisite Support Credits GoSMTP’s Mailer API connecters are derived from Fluent SMTP https://wordpress.org/plugins/fluent-smtp/ How to install GoSMTP Go To your WordPress install -> Plugins -> Add New Button -> In Search Box search For GoSMTP -> Click on Install.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C