Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App

We’ve been using Post SMTP for years. Initially, we started with WP Mail SMTP, but the free version didn’t include logging, while Post SMTP did, and that occasionally came in handy. So we switched to Post SMTP across all our projects.

About two years ago, several websites we manage were hacked due to a vulnerability in Post SMTP. Well, you could argue that maybe something like that can happen ONCE. But it already caused a serious loss of trust for us. Fortunately, we haven’t had any further breaches related to this plugin since then, but that’s only because we’ve been extremely cautious about updating it.

However, over the past two years, the plugin has had FIVE high-severity and TWO critical vulnerabilities. That’s simply unacceptable for serious projects. After the latest “Unauthenticated Stored Cross-Site Scripting” issue, I’m done with this plugin for good, and we’re switching to WP Mail SMTP everywhere. I’ve already subscribed. I’d rather pay for a reliable and secure plugin than use a free one that keeps leaving the door wide open to attackers once or twice every year.

After the last critical issue, I even opened a support request in November, where support claimed that “security remains an absolute top priority.” And now here we are again, 6 months later, with another “unauthenticated” vulnerability – even if it’s “just” XSS this time, and depends on stack and setup. That’s enough for me. It feels like nothing has really changed. This is not a serious plugin, and it should NOT be used for serious projects. I’ve never left a one-star rating before, but this time I had to.

Just take a look at the vulnerabilities of Post SMTP on Wordfence Vulnerability Database, their severity, and how often they occur. And compare it with something else, like WP Mail SMTP.

We’re moving on and not looking back. Goodbye Post SMTP, hello paid WP Mail SMTP.
If you still decide to stick with this plugin, only use it with auto-updates enabled.

Great Plugin easy to config and troubleshoot.

Aqib was very helpful in setting up PostSMTP on my site. The plug-in is working very well.

After purchasing PostSMTP Pro and facing some incompatibility issues with other plugins I asked for help and I was impressed by the awesome and rapid support given by M Aqib Khan to solve the issue.
Great thanks!

Just as an information for people who are using AIOS Security and Firewall : the Open Email Tracking needs the option “Advanced Character String Filter” to be disabled (AIOS => Firewall => PHP rules => String filtering).

I highly recommend this plugin.

• This topic was modified 3 weeks ago by mahonyson. Reason: added information

PostSMTP is hands-down the best of its kind in the WordPress world. I have been using for years for all my websites.
But today I want to say HUGE THANKS to Mr. Aqib Khan for your prompt and excellent support helping me work out the error code that I was receiving.
So, in short, top-notch plugin with the best customer support behind it!