About this plugin
DamaSoft Email Security reduces messages sent to malformed, disposable, blacklisted or mistyped recipient domains. Its core WordPress mail protection works independently and has no required plugin dependency. When WooCommerce or the official CartFlows Cart Abandonment Recovery plugin is present, their specific checkout and recovery flows are protected automatically.
The plugin does not claim to verify whether an individual mailbox exists. That would require sending data to an external verification service. Instead, it combines checks that can run locally and transparently:
- WordPress email-syntax validation.
- Manual address and domain allow/block lists.
- A local list of common disposable-email domains.
- Typo suggestions for well-known providers.
- Cached DNS checks for MX, A and AAAA records.
- Conservative fail-open DNS mode to reduce false positives during temporary resolver outages.
Outgoing WordPress mail
The plugin checks To, Cc and Bcc recipients before PHPMailer sends a message. Certainly invalid recipients are removed from mixed recipient lists. When all routing recipients are invalid, the send is intentionally short-circuited as successful so queue and recovery plugins do not retry forever.
WooCommerce
This integration is optional. When WooCommerce is active, both classic checkout and the Checkout Block are validated on the server. com, but the server remains the source of truth.
CartFlows Cart Abandonment Recovery
This integration is optional. When CartFlows Cart Abandonment Recovery is active, verified capture requests are checked before an invalid address reaches the recovery queue. A scheduled cleanup can also mark existing bad rows as unsubscribed without deleting CartFlows statistics.
The integration deliberately touches only the official cartflows_ca_cart_abandonment table after verifying its schema.
Smart control centre
The modern administration area separates the operational dashboard, allow/block rules, settings and filtered security log into focused submenu screens. The dashboard keeps live counters, system health, quick actions and frequent offenders immediately visible. A compact WordPress dashboard widget gives a useful summary without loading assets on unrelated admin pages.
Privacy by design
No data is sent to DamaSoft or to an external HTTP service. DNS checks send only the domain portion of an address to the DNS resolver configured by the hosting provider. The security log stores blocked or uncertain addresses only; successful mail is not copied.
Checkout IP addresses are anonymized, retention is configurable, and WordPress personal-data export and erasure tools are supported.
Languages
The interface is Italian on Italian WordPress installations and English on other locales. org language pack takes precedence. mo files.