Mailgun for WordPress

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 58% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

Recent releases and news for this plugin

1. 2026-07-17 Version 2.2.2 Security fix: replace insecure SHA-1/MD5 hash functions with SHA-256 for the API request hash, multipart boundary generation, and widget ID generation 2.2.2
2. 2026-07-09 Version 2.2.1 Security fix: add nonce verification and server-side list address validation to the add_list AJAX action to prevent unauthenticated arbitrary list subscription (reported by Pedro Pinho) 2.2.1
3. 2026-06-30 Version 2.2.0 Fix: use only the domain part (not the full URL) when building the Mailgun API request Fix: remove automatic key- prefix from API key handling; stored keys that included it may need updating Fix: add explicit nullable ty 2.2.0
4. 2025-06-24 Version 2.1.9 Added fallback option. Merge PR for widget 2.1.9
5. 2025-05-11 Version 2.1.8 Just keep update WP version. And tested compatibility with it 2.1.8
6. 2025-03-07 Version 2.1.6 Fixed bug with sending test emails (JS error). Basically it’s 2.1.5. Just version updates 2.1.6

2 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Critical · 9.8 Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys ↗
   2026-08-21 CVE-2026-78003 Server-Side Request Forgery (SSRF) Affects <= 2.2.0 Patched in 2.2.1
2. Medium · 5.3 Mailgun for WordPress <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Mailgun List Subscription ↗
   2026-07-13 CVE-2026-14834 Missing Authorization Affects <= 2.2.0 Patched in 2.2.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 96 languages, 0 at 90% or more

Plus 72 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-11-29 90K+ → 80K+ down after 539 days in tier
2. 2023-06-09 100K+ → 90K+ down after 1 days in tier
3. 2023-06-08 90K+ → 100K+ up after 1 days in tier
4. 2023-06-07 100K+ → 90K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WP Serverless Forms 200+ installs · 4.0★ · 3 shared tags D
• FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP 600K+ installs · 4.8★ · 2 shared tags A
• SMTP Mailer 70K+ installs · 4.5★ · 2 shared tags A
• Gmail SMTP 10K+ installs · 4.1★ · 2 shared tags B
• Simple SMTP 2K+ installs · 4.4★ · 2 shared tags B
• SMTP for Contact Form 7 1K+ installs · 3.9★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Mailgun for WordPress into a readme, a review or a deck. It updates itself.

Mailgun for WordPress: 80K+ active installs, 3.8★ (49 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/mailgun