Does Change Mail Sender have any unpatched vulnerabilities?

No. All known vulnerabilities in Change Mail Sender have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Change Mail Sender compatible with WordPress 6.7.5?

According to WordPress.org data, Change Mail Sender 1.3.0 has been tested up to WordPress 6.7.5. Check the plugin's changelog for the latest compatibility information.

Is Change Mail Sender compatible with PHP 5.6.20+?

Change Mail Sender requires PHP 5.6.20 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Change Mail Sender updated?

Change Mail Sender was last updated on Apr 2, 2025. Frequent updates are generally a positive security signal.

What is Change Mail Sender's security score?

Change Mail Sender has a WP-Safety security score of 92/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Change Mail Sender Security & Risk Analysis

wordpress.org/plugins/cb-change-mail-sender

Easily change the default WordPress from email name and from email address.

20K active installs v1.3.0 PHP 5.6.20+ WP 5.2+ Updated Apr 2, 2025

change-mail-senderemailfrom-emailmailname

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is Change Mail Sender Safe to Use in 2026?

Generally Safe

Score 92/100

Change Mail Sender has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago

Risk Assessment

The "cb-change-mail-sender" v1.3.0 plugin exhibits a strong security posture based on the provided static analysis. It demonstrates excellent adherence to security best practices, with all identified entry points (AJAX handlers) protected by nonces and capability checks. The code extensively uses prepared statements for SQL queries and has a very high rate of properly escaped output, mitigating common injection and cross-site scripting (XSS) risks. The absence of any recorded vulnerabilities or CVEs further reinforces its current security standing.

Vulnerabilities

None known

Change Mail Sender Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Change Mail Sender Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

79 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

98% escaped81 total outputs

Attack Surface

Change Mail Sender Attack Surface

Entry Points4

Unprotected0

AJAX Handlers 4

authwp_ajax_cb_change_mail_sender_product_education_dismisssrc\Admin\ProductEducation.php:54

authwp_ajax_cb_change_mail_sender_install_smtpsrc\Admin\SMTP.php:71

authwp_ajax_cb_change_mail_sender_activate_smtpsrc\Admin\SMTP.php:72

authwp_ajax_cb_change_mail_sender_smtp_page_check_plugin_statussrc\Admin\SMTP.php:73

WordPress Hooks 14

actionadmin_menusrc\Admin\AdminCore.php:51

filteradmin_footer_textsrc\Admin\AdminCore.php:52

filtersubmenu_filesrc\Admin\AdminCore.php:98

actionadmin_initsrc\Admin\Settings.php:47

actioncurrent_screensrc\Admin\Settings.php:48

actionadmin_enqueue_scriptssrc\Admin\Settings.php:161

actioncb_change_mail_sender_admin_core_render_admin_page_tabsrc\Admin\Settings.php:162

actioncurrent_screensrc\Admin\SMTP.php:75

actionadmin_enqueue_scriptssrc\Admin\SMTP.php:267

actioncb_change_mail_sender_admin_core_render_admin_page_tabsrc\Admin\SMTP.php:268

filteradmin_titlesrc\Admin\SMTP.php:269

actioninitsrc\Core.php:56

filterwp_mail_fromsrc\Core.php:58

filterwp_mail_from_namesrc\Core.php:59

Maintenance & Trust

Change Mail Sender Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5

Last updatedApr 2, 2025

PHP min version5.6.20

Downloads187K

Community Trust

Rating88/100

Number of ratings18

Active installs20K

Alternatives

Change Mail Sender Alternatives

Barbas – Default wp mail sender

barbas-default-wp-mail-sender

Simple way to change the default wordpress sender\'s name and email.

10 No CVEs

Admin Email As From Address

admin-email-as-from-address

Use the admin email address as the from email address

60 No CVEs

Change Default Mail Sender Email and Name

change-mail-sender-email-and-name

Changing the mail sender name and email from the WordPress default name and email is easy.

30 No CVEs

Change Mail Sender

change-mail-sender

Change Mail Sender is a very simple plugin to change the sender name in WordPress outgoing emails. It takes Automatically site name in emails.

10 No CVEs

Email Sender Control

email-sender-control

100

Set custom WP sender name/email, send test emails, and search, sort, or view detailed logs to track, debug, and ensure reliable email delivery.

0 No CVEs

Developer Profile

Change Mail Sender Developer Profile

Syed Balkhi

94 plugins · 23.5M total installs

trust score

Avg Security Score

91/100

Avg Patch Time

795 days

View full developer profile

Detection Fingerprints

How We Detect Change Mail Sender

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/cb-change-mail-sender/assets/lib/lity/lity.min.js/wp-content/plugins/cb-change-mail-sender/assets/lib/lity/lity.min.css/wp-content/plugins/cb-change-mail-sender/assets/css/admin-settings.css/wp-content/plugins/cb-change-mail-sender/assets/css/admin-settings.min.css/wp-content/plugins/cb-change-mail-sender/assets/js/admin-settings.js/wp-content/plugins/cb-change-mail-sender/assets/js/admin-settings.min.js

Version Parameters

cb-change-mail-sender/assets/css/admin-settings.css?ver=cb-change-mail-sender/assets/js/admin-settings.js?ver=

HTML / DOM Fingerprints

CSS Classes

cb-mail-sender-sepcb-change-mail-sender-hidecb-change-mail-sender-product-education-images-rowcb-change-mail-sender-product-education-images-row-image

HTML Comments

Data Attributes

data-litydata-lity-desc

JS Globals

cb_change_mail_sender_admin_settings

FAQ