Gravity SMTP

WordPress transactional email routing and delivery tracking. Gravity SMTP replaces the unreliable default PHP mail() with direct API integration to your provider — SendGrid, Mailgun, Postmark, Brevo, Amazon SES, Microsoft 365, Google, or custom SMTP.

Required on Elite or Nonprofit Gravity Forms license.

When to use

• Installing or updating Gravity SMTP
• Configuring an email provider (SendGrid, Mailgun, Postmark, etc.)
• Diagnosing failed email delivery or notification issues
• Auditing credential storage (CVE-2026-4020 mitigation)
• Setting up backup senders or delivery alerts
• Verifying email logging in wp-admin

⚠️ CVE-2026-4020 — update immediately

Gravity SMTP ≤ 2.1.4 has an unauthenticated REST endpoint that exposes your mail provider API keys. Update to v2.1.5+ on every environment before any other work.