How many vulnerabilities does GoSMTP – SMTP for WordPress have?

The audit found 71 findings: 0 critical, 1 high, 31 medium severity.

Should I use GoSMTP – SMTP for WordPress?

Based on the latest audit (grade B, risk HIGH), review the 71 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

GoSMTP – SMTP for WordPress

Q: Is GoSMTP – SMTP for WordPress secure?

WP HealthKit's independent audit rates GoSMTP – SMTP for WordPress overall risk as HIGH with a report-card grade of B.

v1.2.0WordPress Plugin500K+ installs4.2Audited 143 days ago

HIGH

Stable

Total Findings

Security Grade

Active Installs

500K+

Coding Score

100/100

Security Findings

Critical0

High1

Medium31

Low37

Info2

Executive Summary

Is GoSMTP – SMTP for WordPress secure? In WP HealthKit's independent 2026 audit, GoSMTP – SMTP for WordPress received an overall risk of HIGH and a report-card grade of B across 71 findings (0 critical, 1 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 5.6

Categories with Findings

Cross-Site ScriptingType SafetyWordPress CompatibilityHook WiringPerformanceInternationalizationAI-Generated CodePlugin Conflicts

Date	Version	Rating	Findings	Standards
6/1/2026Latest	v1.2.0	HIGH	71	100/100
6/1/2026	v1.2.0	HIGH	71	100/100
6/1/2026	v1.2.0	HIGH	71	100/100

Plugin Info

Active Installs: 500K+
WP.org Rating: 4.2
Requires WP: 5.5+
Tested Up To: 7.0
Requires PHP: 5.5+
Audit Count: 3
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![GoSMTP – SMTP for WordPress security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/gosmtp)](https://wphealthkit.com/directory/gosmtp)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin