Title: SMTPMaster Email Sender Author: smtpmaster Published: September 14, 2026 Last modified: September 15, 2026 --- Search plugins ![](https://ps.w.org/smtpmaster-email-sender/assets/icon-256x256.png?rev=3695058) # SMTPMaster Email Sender By [smtpmaster](https://profiles.wordpress.org/smtpmaster/) [Download](https://downloads.wordpress.org/plugin/smtpmaster-email-sender.zip) * [Details](https://wordpress.org/plugins/smtpmaster-email-sender/#description) * [Reviews](https://wordpress.org/plugins/smtpmaster-email-sender/#reviews) * [Installation](https://wordpress.org/plugins/smtpmaster-email-sender/#installation) * [Development](https://wordpress.org/plugins/smtpmaster-email-sender/#developers) [Support](https://wordpress.org/support/plugin/smtpmaster-email-sender/) ## Description SMTPMaster Email Sender sends WordPress email through an administrator-configured SMTP server or the SMTPMaster API, verifies connections, and stores local delivery and tracking logs. #### Features * Choice of administrator-configured SMTP credentials or native SMTPMaster API delivery. * API-key and SMTP connection verification. * Test-email diagnostics. * Local email logs and CSV export. * Optional first-party open and click tracking, disabled by default. * Periodic SMTPMaster API delivery-status synchronization when a verified and authorized API key is saved. * Failed-email retry handling via WP-Cron. The frontend arbitrary-send Gutenberg block and email-sending shortcodes are disabled in this WordPress.org release. Inactive event, template, and WooCommerce automation features are not advertised as active features. ### External services This plugin can connect to the SMTPMaster API when an administrator selects SMTPMaster API delivery, enters an API key, and authorizes the connection. A SMTPMaster account is not required when the administrator uses their own SMTP server. API-key verification sends the configured API key, its visible prefix and non-reversible fingerprint, the WordPress site URL, and a plugin source identifier to the SMTPMaster API. When the plugin connection is registered, it sends the API credentials and identifiers described above together with the WordPress site URL, WordPress administrator email address, plugin identifier, and plugin version. When WordPress sends an email through SMTPMaster API mode, the plugin sends the sender name and email address, To, CC and BCC recipient addresses, subject, message body, message ID, site URL, and API authentication data. HTML messages are sent with an HTML body and a generated plain-text version. Plain-text messages are sent as plain text. API delivery currently does not support attachments. Messages containing attachments are rejected locally rather than uploading the attachment to SMTPMaster. Reply-To addresses and arbitrary custom headers are not transmitted by the current API implementation. When delivery-status synchronization is enabled, the plugin periodically sends recent message IDs, the site URL, plugin source identifiers, and API authentication data to retrieve delivery, bounce, complaint, or deferral statuses. The SMTPMaster service is provided by SMTPMaster and operated by CloudWind Technologies LLP. Terms of Service: https://smtpmaster.com/terms-of-use/ Privacy Policy: https:// smtpmaster.com/privacy-policy/ Direct SMTP mode uses the administrator’s selected SMTP server as an external mail service. The plugin sends normal email delivery data to that server, and attachments supplied to normal `wp_mail()` calls may be delivered through that selected SMTP server. Terms and privacy practices for a user-selected SMTP provider are controlled by that provider. ### Privacy and retention The plugin stores local sender and recipient addresses, subjects, email bodies, message IDs, delivery and error statuses, API-key fingerprints, open timestamps, viewer IP addresses from `REMOTE_ADDR`, clicked URLs and timestamps, and failed- email retry queue contents. Open tracking and click tracking are disabled by default and require administrator opt-in. Open counts are estimates because some mail clients block or preload tracking pixels. Click tracking uses signed public redirect URLs so recipients do not need a WordPress account or expiring WordPress nonce. Local email and tracking logs are kept in the WordPress database so changing SMTP credentials, API keys, uninstalling, or reinstalling the plugin does not hide or delete older history. The daily WP-Cron cleanup removes only stale completed or failed retry-queue jobs. Administrators may delete associated local records through WordPress personal-data erasure tools. Uninstall removes scheduled plugin cron events but keeps plugin settings and local log tables for reinstall. Suggested privacy policy text: This site may use SMTPMaster Email Sender to deliver WordPress email. Depending on the administrator’s settings, the plugin may store local email logs containing sender and recipient addresses, subjects, message bodies, message IDs, delivery/error status, open timestamps, viewer IP addresses, clicked URLs, and retry queue data. Optional open and click tracking are disabled by default. When SMTPMaster API delivery is enabled, email delivery data and API authentication data are sent to SMTPMaster. When custom SMTP delivery is enabled, email delivery data is sent to the configured SMTP provider. ## Installation 1. Upload the `smtpmaster-email-sender` folder to the `/wp-content/plugins/` directory. 2. Activate the plugin through the Plugins menu in WordPress. 3. Navigate to SMTPMaster in the admin menu. 4. Configure either SMTP credentials or SMTPMaster API delivery under SMTPMaster > Settings. ## FAQ ### Is a SMTPMaster account required? No. A SMTPMaster account is required only for SMTPMaster API delivery. Custom SMTP mode uses the SMTP server chosen by the administrator. ### What data is sent in API mode? API mode sends API authentication data, site URL, sender and recipient addresses, CC and BCC addresses, subject, body, message ID, and plugin source identifiers to SMTPMaster. ### What is sent in custom SMTP mode? Custom SMTP mode sends normal email delivery data to the SMTP server configured by the administrator. Attachments supplied to normal `wp_mail()` calls may be delivered through that SMTP server. ### Are attachments supported? Attachments are supported by normal SMTP delivery through `wp_mail()`. SMTPMaster API mode currently rejects messages with attachments locally. ### How does tracking work? If enabled by the administrator, open tracking adds a small image to HTML email and click tracking rewrites HTTP/HTTPS links to signed public redirect URLs. Opens are estimates. ### Where are logs stored? Logs are stored in local WordPress database tables created by the plugin. ### How can tracking be disabled? Open and click tracking are disabled by default. Administrators can keep them disabled or turn them off in SMTPMaster > Settings. ### What happens to data on uninstall? Uninstall removes scheduled plugin cron events but keeps plugin settings and local log tables so they are available if the plugin is reinstalled. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “SMTPMaster Email Sender” is open source software. The following people have contributed to this plugin. Contributors * [ smtpmaster ](https://profiles.wordpress.org/smtpmaster/) [Translate “SMTPMaster Email Sender” into your language.](https://translate.wordpress.org/projects/wp-plugins/smtpmaster-email-sender) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/smtpmaster-email-sender/), check out the [SVN repository](https://plugins.svn.wordpress.org/smtpmaster-email-sender/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/smtpmaster-email-sender/) by [RSS](https://plugins.trac.wordpress.org/log/smtpmaster-email-sender/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.1 * Security hardening: disabled public arbitrary email block and shortcode sending. * Security hardening: signed tracking URLs and rejected tampered click destinations. * Changed open and click tracking to disabled by default. * Stopped rendering saved complete API keys and SMTP passwords in admin HTML. * Allowed delivery-status sync for SMTP and API logs when a verified and authorized SMTPMaster API key is saved. * Added external-service and privacy disclosures, personal-data export/erase support, uninstall cleanup, and retry-queue cleanup. #### 1.0.0 * Initial release. ## Meta * Version **1.0.2** * Last updated **3 hours ago** * Active installations **Fewer than 10** * WordPress version ** 5.8 or higher ** * Tested up to **7.0.4** * PHP version ** 7.4 or higher ** * Tags * [email](https://wordpress.org/plugins/tags/email/)[logging](https://wordpress.org/plugins/tags/logging/) [mail](https://wordpress.org/plugins/tags/mail/)[smtp](https://wordpress.org/plugins/tags/smtp/) [tracking](https://wordpress.org/plugins/tags/tracking/) * [Advanced View](https://wordpress.org/plugins/smtpmaster-email-sender/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/smtpmaster-email-sender/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/smtpmaster-email-sender/reviews/) ## Contributors * [ smtpmaster ](https://profiles.wordpress.org/smtpmaster/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/smtpmaster-email-sender/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://smtpmaster.com)