[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffdo_Kv498tC_NYiuBU2f4oBXdoVlOBexKdeTD2Xyvd0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":48,"crawl_stats":37,"alternatives":55,"analysis":162,"fingerprints":612},"sender","Sender by BestWebSoft","1.4.1","bestweblayout","https:\u002F\u002Fprofiles.wordpress.org\u002Fbestweblayout\u002F","\u003Cp>Sender plugin sends a bulk newsletter mailing to your WordPress website users. Set the time interval and a number of messages sent at once, customize “FROM” field, choose the mail sending function, send emails with confirmation and more.\u003C\u002Fp>\n\u003Cp>Connect with your customers, increase traffic, and drive sales!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fdemo-sender-plugin\u002F?ref=readme\" rel=\"nofollow ugc\">View Demo\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FkwbkOXrF10M?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>Free Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Add and manage unlimited mailouts\u003C\u002Fli>\n\u003Cli>Send emails to:\n\u003Cul>\n\u003Cli>All users\u003C\u002Fli>\n\u003Cli>Certain categories of users\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Manage sender reports\u003C\u002Fli>\n\u003Cli>Set time interval for mail sending\u003C\u002Fli>\n\u003Cli>Set the number of messages sent at one time\u003C\u002Fli>\n\u003Cli>Compatible with \u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fsubscriber\u002F?k=9e068dce9989e5146fafbf42ee471f54\" rel=\"nofollow ugc\">Subscriber\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Customize ‘FROM’ field with:\n\u003Cul>\n\u003Cli>Name\u003C\u002Fli>\n\u003Cli>Email\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Compatible with latest WordPress version\u003C\u002Fli>\n\u003Cli>Incredibly simple settings for fast setup without modifying code\u003C\u002Fli>\n\u003Cli>Detailed step-by-step documentation and videos\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>Pro Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>All features from Free version included plus:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add and manage unlimited email templates\u003C\u002Fli>\n\u003Cli>Use pre-built email templates\u003C\u002Fli>\n\u003Cli>Create a custom mailing list\u003C\u002Fli>\n\u003Cli>Set mailing priority\u003C\u002Fli>\n\u003Cli>Set the number of attempts for email sending\u003C\u002Fli>\n\u003Cli>Edit message content with a TinyMCE visual editor\u003C\u002Fli>\n\u003Cli>Enable email sending in HTML format\u003C\u002Fli>\n\u003Cli>Send email with confirmation\u003C\u002Fli>\n\u003Cli>Display fonts list on Edit letter\u002FEdit Template pages\u003C\u002Fli>\n\u003Cli>Provide the access for Editors to create email templates, emails and send test emails\u003C\u002Fli>\n\u003Cli>Automatic mailout for new:\n\u003Cul>\n\u003Cli>Posts\u003C\u002Fli>\n\u003Cli>Pages\u003C\u002Fli>\n\u003Cli>Custom post types\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Import user`s emails list from CSV file [NEW]\u003C\u002Fli>\n\u003Cli>Get answer to your question within one business day (\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fsupport-policy\u002F\" rel=\"nofollow ugc\">Support Policy\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fsender\u002F?k=f658a48b03f44d5d82ec3cbccba9664b\" rel=\"nofollow ugc\">Upgrade to Pro Now\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>If you have a feature suggestion or idea you’d like to see in the plugin, we’d love to hear about it! \u003Ca href=\"https:\u002F\u002Fsupport.bestwebsoft.com\u002Fhc\u002Fen-us\u002Frequests\u002Fnew\" rel=\"nofollow ugc\">Suggest a Feature\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Documentation & Videos\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fdocumentation\u002Fsender\u002Fsender-user-guide\u002F\" rel=\"nofollow ugc\">[Doc] User Guide\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fdocumentation\u002Fhow-to-install-a-wordpress-product\u002Fhow-to-install-a-wordpress-plugin\u002F\" rel=\"nofollow ugc\">[Doc] Installation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fdocumentation\u002Fhow-to-purchase-a-wordpress-plugin\u002Fhow-to-purchase-wordpress-plugin-from-bestwebsoft\u002F\" rel=\"nofollow ugc\">[Doc] Purchase\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.youtube.com\u002Fwatch?v=VIrkPiUJv08\" rel=\"nofollow ugc\">[Video] Installation Instruction\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Help & Support\u003C\u002Fh4>\n\u003Cp>Visit our Help Center if you have any questions, our friendly Support Team is happy to help – \u003Ca href=\"https:\u002F\u002Fsupport.bestwebsoft.com\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fsupport.bestwebsoft.com\u002F\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Affiliate Program\u003C\u002Fh4>\n\u003Cp>Earn 20% commission by selling the premium WordPress plugins and themes by BestWebSoft — https:\u002F\u002Fbestwebsoft.com\u002Faffiliate\u002F\u003C\u002Fp>\n\u003Ch4>Translation\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Russian (ru_RU)\u003C\u002Fli>\n\u003Cli>Ukrainian (uk)\u003C\u002Fli>\n\u003Cli>Spanish (es_ES)\u003C\u002Fli>\n\u003Cli>French (fr_FR)\u003C\u002Fli>\n\u003Cli>Italian (it_IT)\u003C\u002Fli>\n\u003Cli>Arabic (ar)\u003C\u002Fli>\n\u003Cli>German (de_DE)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Some of these translations are not complete. We are constantly adding new features which should be translated. If you would like to create your own language pack or update the existing one, you can send \u003Ca href=\"https:\u002F\u002Fcodex.wordpress.org\u002FTranslating_WordPress\" rel=\"nofollow ugc\">the text of PO and MO files\u003C\u002Fa> to \u003Ca href=\"https:\u002F\u002Fsupport.bestwebsoft.com\u002Fhc\u002Fen-us\u002Frequests\u002Fnew\" rel=\"nofollow ugc\">BestWebSoft\u003C\u002Fa> and we’ll add it to the plugin. You can download the latest version of the program for work with PO and MO \u003Ca href=\"https:\u002F\u002Fwww.poedit.net\u002Fdownload.php\" rel=\"nofollow ugc\">files Poedit\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Recommended Plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fupdater\u002F?k=94d3b6d567ade1cd7a988b80874cdee7\" rel=\"nofollow ugc\">Updater\u003C\u002Fa> – Automatically check and update WordPress website core with all installed plugins and themes to the latest versions.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fsmtp\u002F\" rel=\"nofollow ugc\">SMTP\u003C\u002Fa> – Configure SMTP server to receive email messages from WordPress to Gmail, Yahoo, Hotmail and other services.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fsubscriber\u002F?k=9e068dce9989e5146fafbf42ee471f54\" rel=\"nofollow ugc\">Subscriber\u003C\u002Fa> – Add email newsletter sign up form to WordPress posts, pages and widgets. Collect data and subscribe your users.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fuser-role\u002F?k=dd628108fbb7abe1e063391ae40b7056\" rel=\"nofollow ugc\">User Role\u003C\u002Fa> – Powerful user role management plugin for WordPress website. Create, edit, copy, and delete user roles.\u003C\u002Fli>\n\u003C\u002Ful>\n","Send bulk email messages to WordPress users. Custom templates, advanced settings and detailed reports.",90,28396,82,9,"2025-06-05T09:28:00.000Z","6.8.5","5.6","",[20,21,22,4,23],"mail-sender","mail-sender-plugin","mailout","sender-plugin","https:\u002F\u002Fbestwebsoft.com\u002Fproducts\u002Fwordpress\u002Fplugins\u002Fsender\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsender.1.4.1.zip",100,1,0,"2019-08-20 00:00:00","2026-03-15T15:16:48.613Z",[32],{"id":33,"url_slug":34,"title":35,"description":36,"plugin_slug":4,"theme_slug":37,"affected_versions":38,"patched_in_version":39,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":29,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2017-18564","sender-by-bestwebsoft-reflected-cross-site-scripting","Sender by BestWebSoft \u003C= 1.2.0 - Reflected Cross-Site Scripting","The Sender by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping on the 'category' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute in a victim's browser granted they can trick a victim into performing an action, such as clicking on a link.",null,"\u003C=1.2.0","1.2.1","medium",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fde957e90-5758-46f3-90f8-521b47d247ff?source=api-prod",1617,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":49,"total_installs":50,"avg_security_score":51,"avg_patch_time_days":52,"trust_score":53,"computed_at":54},32,16570,98,1944,78,"2026-04-04T20:38:02.070Z",[56,80,105,126,144],{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":64,"downloaded":65,"rating":66,"num_ratings":67,"last_updated":68,"tested_up_to":69,"requires_at_least":70,"requires_php":71,"tags":72,"homepage":18,"download_link":78,"security_score":79,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"cb-change-mail-sender","Change Mail Sender","1.3.0","Syed Balkhi","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmub\u002F","\u003Cp>\u003Cstrong>Do you want to change the WordPress default from email address and from name?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This is the plugin for you! It allows you to change the from email address and name for all emails sent from your WordPress site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Are your WordPress emails not being delivered?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you have issues with email deliverability, then just changing the from email address and name will usually not resolve the issue.\u003C\u002Fp>\n\u003Cp>In order to fix your WordPress emails not reaching your inbox, we suggest installing the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-mail-smtp\u002F\" rel=\"ugc\">WP Mail SMTP\u003C\u002Fa> plugin.\u003C\u002Fp>\n\u003Cp>WP Mail SMTP is trusted by more than 3 million websites. It will fix the deliverability problems with one of your favourite email providers: Gmail, Outlook, SendLayer, Mailgun, and many more.\u003C\u002Fp>\n","Easily change the default WordPress from email name and from email address.",20000,186985,88,18,"2025-04-02T06:24:00.000Z","6.7.5","5.2","5.6.20",[73,74,75,76,77],"change-mail-sender","email","from-email","mail","name","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcb-change-mail-sender.1.3.0.zip",92,{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":90,"num_ratings":91,"last_updated":92,"tested_up_to":93,"requires_at_least":94,"requires_php":95,"tags":96,"homepage":101,"download_link":102,"security_score":51,"vuln_count":103,"unpatched_count":28,"last_vuln_date":104,"fetched_at":30},"elastic-email-sender","Elastic Email Sender","1.2.22","Elastic Email","https:\u002F\u002Fprofiles.wordpress.org\u002Felasticemail\u002F","\u003Cp>Elastic Email Sender allows you to connect your WordPress with our powerful, low-cost Elastic Email API and start sending marketing or transactional emails!\u003Cbr \u002F>\nPlease follow the information below and find out more about how we can help you send your emails in a more efficient way.\u003Cbr \u002F>\nIn case of any questions or concerns, feel free to contact us anytime.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What is the Elastic Email Sender plugin?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The Elastic Email Sender plugin is an easy way to maintain all the aspects related to your email campaigns. From creating and sending your emails to monitoring and managing campaign stats.\u003Cbr \u002F>\nElastic Email Sender replaces the WordPress default wp_mail() function by using API integration with Elastic Email to send an outgoing email from your WordPress installation.\u003Cbr \u002F>\nThanks to this, you can track all the parameters of your delivery, use Private IP addresses to get full control over your sending, maintain reputation and delivery and secure your data better than ever. You can also use your own domain and analyze your data with ease.\u003C\u002Fp>\n\u003Cp>Elastic Email Sender is compatible with almost every solution available on the market including \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\u002F\" rel=\"ugc\">WooCommerce\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-form-7\u002F\" rel=\"ugc\">Contact Form 7\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fninja-forms\u002F\" rel=\"ugc\">Ninja Forms\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fflamingo\u002F\" rel=\"ugc\">Flamingo\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcaldera-forms\u002F\" rel=\"ugc\">Caldera Forms\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbbpress\u002F\" rel=\"ugc\">bbPress\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How to get started?\u003C\u002Fstrong>\u003Cbr \u002F>\nJust sign into your \u003Ca href=\"https:\u002F\u002Fapp.elasticemail.com\u002Fmarketing\u002Fsettings\u002Fnew\u002Fcreate-api\" rel=\"nofollow ugc\">Elastic Email account\u003C\u002Fa>, copy the API Key. Next, please login to your WordPress dashboard, add the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Felastic-email-sender\u002F\" rel=\"ugc\">Elastic Email Sender\u003C\u002Fa> plugin and paste there the API Key from your Elastic Email account.\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>You can translate Elastic Email Sender on \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Felastic-email-sender\" rel=\"nofollow ugc\">\u003Cstrong>translate.wordpress.org\u003C\u002Fstrong>\u003C\u002Fa>.\u003C\u002Fp>\n","Reconfigures wp_mail() to send email using Elastic Email API instead of SMTP.",10000,285191,96,10,"2025-12-03T13:29:00.000Z","6.9.4","5.0","7.0",[97,98,99,100],"email-marketing","email-sender","mailer","transactional-email","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Felastic-email-sender\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Felastic-email-sender.zip",2,"2025-10-28 00:00:00",{"slug":106,"name":107,"version":108,"author":109,"author_profile":110,"description":111,"short_description":112,"active_installs":88,"downloaded":113,"rating":90,"num_ratings":114,"last_updated":115,"tested_up_to":93,"requires_at_least":116,"requires_php":117,"tags":118,"homepage":123,"download_link":124,"security_score":26,"vuln_count":27,"unpatched_count":28,"last_vuln_date":125,"fetched_at":30},"wp-change-email-sender","WP Change Email Sender","3.2","Md Aminur Islam","https:\u002F\u002Fprofiles.wordpress.org\u002Faminurislam01\u002F","\u003Cp>This plugin enable you to change mail sender name and email address from WordPress default mail sender name and email.\u003Cbr \u002F>\nAfter install go to Settings->General.\u003C\u002Fp>\n\u003Ch4>Plugin Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Change WordPress default mail sender name.\u003C\u002Fli>\n\u003Cli>Change WordPress default mail sender email address.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>If you find this plugin useful, consider supporting its development through a \u003Ca href=\"https:\u002F\u002Fwww.buymeacoffee.com\u002Faiarnob\" rel=\"nofollow ugc\">donation\u003C\u002Fa>.\u003C\u002Fp>\n","Easily change WordPress default mail sender name and email address",53287,6,"2025-12-23T15:31:00.000Z","5.8","7.4",[119,120,106,121,122],"wordpress-default-email-sender-change","wp-change-default-email-sender","wp-default-email-change","wp-default-email-sender-name-change","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-change-email-sender\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-change-email-sender.3.2.zip","2024-03-25 00:00:00",{"slug":127,"name":128,"version":129,"author":130,"author_profile":131,"description":132,"short_description":133,"active_installs":26,"downloaded":134,"rating":26,"num_ratings":27,"last_updated":135,"tested_up_to":136,"requires_at_least":137,"requires_php":117,"tags":138,"homepage":142,"download_link":143,"security_score":79,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"change-default-email-sender-name","Change Default Email Sender Name","1.0.0","Mitali Rajpurohit","https:\u002F\u002Fprofiles.wordpress.org\u002Fmitalideva\u002F","\u003Cp>Change Default Email Sender Name is a simple plugin that allows you to change the sender name and Email in your WordPress Website’s outgoing emails.\u003C\u002Fp>\n\u003Cp>To replace the default WordPress settings, go to Settings \u002F Change Sender Name Setting and add Sender Detail.\u003C\u002Fp>\n\u003Cp>No coding knowledge is required.\u003C\u002Fp>\n\u003Cp>Simply download and install the Change Default Email Sender Name plugin.\u003C\u002Fp>\n","Change Default Email Sender Name is a simple plugin that allows you to change the sender name and Email in your WordPress Website's outgoing emai …",1628,"2024-04-25T07:54:00.000Z","6.4.8","4.0",[139,98,140,4,141],"change-default-mail-sender-name","outgoing-email","sender-name","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fchange-default-email-sender-name\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchange-default-email-sender-name.zip",{"slug":145,"name":146,"version":147,"author":148,"author_profile":149,"description":150,"short_description":151,"active_installs":26,"downloaded":152,"rating":26,"num_ratings":27,"last_updated":153,"tested_up_to":16,"requires_at_least":154,"requires_php":18,"tags":155,"homepage":160,"download_link":161,"security_score":26,"vuln_count":28,"unpatched_count":28,"last_vuln_date":37,"fetched_at":30},"custom-email-sender","Custom Email Sender","2.5.9","neoslab","https:\u002F\u002Fprofiles.wordpress.org\u002Fneoslab\u002F","\u003Cp>Custom Email Sender allow you to easily customize the default email sender name and default email address directly from your WordPress dashboard.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>Good news, this plugin is free for everyone! Since it’s released under the GPL, you can use it free of charge on your personal or commercial site.\u003C\u002Fp>\n","Change the default email address and sender name output for all message sent from your WP dashboard.",8993,"2025-04-25T19:46:00.000Z","4.9",[156,141,157,158,159],"sender-email","wordpress-default-email-sender","wordpress-sender-email","wordpress-sender-name","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustom-email-sender\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-email-sender.2.6.0.zip",{"attackSurface":163,"codeSignals":287,"taintFlows":423,"riskAssessment":600,"analyzedAt":611},{"hooks":164,"ajaxHandlers":271,"restRoutes":282,"shortcodes":283,"cronEvents":284,"entryPointCount":103,"unprotectedCount":28},[165,171,175,179,184,188,192,196,201,206,211,214,218,221,225,229,233,237,241,245,248,251,255,257,261,265,268],{"type":166,"name":167,"callback":168,"priority":91,"file":169,"line":170},"filter","load_textdomain_mofile","bws_get_mofile","bws_menu\\bws_functions.php",37,{"type":166,"name":172,"callback":173,"file":169,"line":174},"mce_external_plugins","bws_add_buttons",1098,{"type":166,"name":176,"callback":177,"file":169,"line":178},"mce_buttons","bws_register_buttons",1099,{"type":180,"name":181,"callback":182,"file":169,"line":183},"action","admin_init","bws_plugins_admin_init",1374,{"type":180,"name":185,"callback":186,"file":169,"line":187},"admin_enqueue_scripts","bws_admin_enqueue_scripts",1375,{"type":180,"name":189,"callback":190,"file":169,"line":191},"admin_head","bws_plugins_admin_head",1376,{"type":180,"name":193,"callback":194,"file":169,"line":195},"admin_footer","bws_plugins_admin_footer",1377,{"type":180,"name":197,"callback":198,"priority":199,"file":169,"line":200},"admin_notices","bws_admin_notices",30,1379,{"type":180,"name":202,"callback":203,"priority":204,"file":169,"line":205},"wp_enqueue_scripts","bws_enqueue_custom_code_css_js",20,1381,{"type":166,"name":207,"callback":208,"file":209,"line":210},"cron_schedules","sndr_more_reccurences","includes\\class-sndr-settings.php",94,{"type":166,"name":207,"callback":208,"file":212,"line":213},"sender.php",980,{"type":180,"name":215,"callback":216,"file":212,"line":217},"network_admin_menu","sndr_admin_default_setup",2323,{"type":180,"name":219,"callback":216,"file":212,"line":220},"admin_menu",2325,{"type":180,"name":222,"callback":223,"file":212,"line":224},"plugins_loaded","sndr_plugins_loaded",2328,{"type":166,"name":226,"callback":227,"priority":91,"file":212,"line":228},"plugin_action_links","sndr_plugin_action_links",2330,{"type":166,"name":230,"callback":231,"priority":91,"file":212,"line":232},"plugin_row_meta","sndr_register_plugin_links",2331,{"type":180,"name":234,"callback":235,"file":212,"line":236},"profile_personal_options","sndr_mail_send",2333,{"type":180,"name":238,"callback":239,"file":212,"line":240},"user_register","sndr_mail_register_user",2334,{"type":180,"name":242,"callback":243,"file":212,"line":244},"init","sndr_init",2336,{"type":180,"name":181,"callback":246,"file":212,"line":247},"sndr_admin_init",2337,{"type":180,"name":185,"callback":249,"file":212,"line":250},"sndr_admin_head",2338,{"type":180,"name":252,"callback":253,"priority":91,"file":212,"line":254},"profile_update","sndr_update",2339,{"type":166,"name":207,"callback":208,"file":212,"line":256},2340,{"type":180,"name":258,"callback":259,"file":212,"line":260},"sndr_mail_hook","sndr_cron_mail",2341,{"type":166,"name":262,"callback":263,"priority":91,"file":212,"line":264},"set-screen-option","sndr_table_set_option",2342,{"type":180,"name":197,"callback":266,"file":212,"line":267},"sndr_plugin_banner",2344,{"type":180,"name":269,"callback":266,"file":212,"line":270},"network_admin_notices",2345,[272,278],{"action":273,"nopriv":274,"callback":273,"hasNonce":275,"hasCapCheck":274,"file":276,"line":277},"bws_submit_request_feature_action",false,true,"bws_menu\\class-bws-settings.php",1453,{"action":279,"nopriv":274,"callback":279,"hasNonce":275,"hasCapCheck":274,"file":280,"line":281},"bws_submit_uninstall_reason_action","bws_menu\\deactivation-form.php",433,[],[],[285],{"hook":258,"callback":258,"file":212,"line":286},982,{"dangerousFunctions":288,"sqlUsage":289,"outputEscaping":367,"fileOperations":103,"externalRequests":114,"nonceChecks":369,"capabilityChecks":421,"bundledLibraries":422},[],{"prepared":290,"raw":291,"locations":292},49,34,[293,296,300,303,305,307,310,312,314,316,318,320,322,324,326,328,330,332,334,336,338,340,342,344,346,348,350,352,354,357,359,361,363,365],{"file":169,"line":294,"context":295},1351,"$wpdb->get_col() with variable interpolation",{"file":297,"line":298,"context":299},"includes\\class-sndr-report-list.php",105,"$wpdb->get_results() with variable interpolation",{"file":297,"line":301,"context":302},200,"$wpdb->query() with variable interpolation",{"file":297,"line":304,"context":302},374,{"file":297,"line":306,"context":299},377,{"file":212,"line":308,"context":309},191,"$wpdb->get_row() with variable interpolation",{"file":212,"line":311,"context":302},194,{"file":212,"line":313,"context":302},198,{"file":212,"line":315,"context":302},201,{"file":212,"line":317,"context":302},204,{"file":212,"line":319,"context":302},207,{"file":212,"line":321,"context":302},209,{"file":212,"line":323,"context":302},211,{"file":212,"line":325,"context":302},216,{"file":212,"line":327,"context":302},219,{"file":212,"line":329,"context":302},339,{"file":212,"line":331,"context":302},341,{"file":212,"line":333,"context":302},347,{"file":212,"line":335,"context":302},355,{"file":212,"line":337,"context":309},366,{"file":212,"line":339,"context":302},369,{"file":212,"line":341,"context":302},373,{"file":212,"line":343,"context":302},375,{"file":212,"line":345,"context":295},378,{"file":212,"line":347,"context":302},380,{"file":212,"line":349,"context":299},489,{"file":212,"line":351,"context":299},528,{"file":212,"line":353,"context":302},1126,{"file":212,"line":355,"context":356},1311,"$wpdb->get_var() with variable interpolation",{"file":212,"line":358,"context":302},2230,{"file":212,"line":360,"context":302},2243,{"file":212,"line":362,"context":295},2248,{"file":212,"line":364,"context":302},2259,{"file":212,"line":366,"context":302},2271,{"escaped":368,"rawEcho":369,"locations":370},570,24,[371,374,376,378,379,382,384,386,388,390,392,394,396,398,400,402,404,407,409,411,413,415,417,419],{"file":169,"line":372,"context":373},155,"raw output",{"file":169,"line":375,"context":373},174,{"file":169,"line":377,"context":373},176,{"file":169,"line":315,"context":373},{"file":380,"line":381,"context":373},"bws_menu\\bws_menu.php",562,{"file":380,"line":383,"context":373},645,{"file":380,"line":385,"context":373},649,{"file":380,"line":387,"context":373},652,{"file":380,"line":389,"context":373},735,{"file":276,"line":391,"context":373},548,{"file":276,"line":393,"context":373},574,{"file":276,"line":395,"context":373},908,{"file":276,"line":397,"context":373},1190,{"file":276,"line":399,"context":373},1192,{"file":276,"line":401,"context":373},1194,{"file":276,"line":403,"context":373},1197,{"file":405,"line":406,"context":373},"bws_menu\\deprecated.php",129,{"file":209,"line":408,"context":373},296,{"file":212,"line":410,"context":373},761,{"file":212,"line":412,"context":373},1090,{"file":212,"line":414,"context":373},1633,{"file":212,"line":416,"context":373},1792,{"file":212,"line":418,"context":373},1973,{"file":212,"line":420,"context":373},2174,3,[],[424,457,471,481,489,499,507,521,534,548,562,582],{"entryPoint":425,"graph":426,"unsanitizedCount":28,"severity":456},"bws_add_menu_render (bws_menu\\bws_menu.php:12)",{"nodes":427,"edges":452},[428,432,438,442,445,449],{"id":429,"type":430,"label":431,"file":380,"line":204},"n0","source","$_GET (x14)",{"id":433,"type":434,"label":435,"file":380,"line":436,"wp_function":437},"n1","sink","echo() [XSS]",354,"echo",{"id":439,"type":430,"label":440,"file":380,"line":441},"n2","$_POST (x2)",93,{"id":443,"type":434,"label":435,"file":380,"line":444,"wp_function":437},"n3",404,{"id":446,"type":430,"label":447,"file":380,"line":448},"n4","$_REQUEST (x2)",268,{"id":450,"type":434,"label":435,"file":380,"line":451,"wp_function":437},"n5",445,[453,454,455],{"from":429,"to":433,"sanitized":275},{"from":439,"to":443,"sanitized":275},{"from":446,"to":450,"sanitized":275},"low",{"entryPoint":458,"graph":459,"unsanitizedCount":28,"severity":456},"\u003Cbws_menu> (bws_menu\\bws_menu.php:0)",{"nodes":460,"edges":467},[461,462,463,464,465,466],{"id":429,"type":430,"label":431,"file":380,"line":204},{"id":433,"type":434,"label":435,"file":380,"line":436,"wp_function":437},{"id":439,"type":430,"label":440,"file":380,"line":441},{"id":443,"type":434,"label":435,"file":380,"line":444,"wp_function":437},{"id":446,"type":430,"label":447,"file":380,"line":448},{"id":450,"type":434,"label":435,"file":380,"line":451,"wp_function":437},[468,469,470],{"from":429,"to":433,"sanitized":275},{"from":439,"to":443,"sanitized":275},{"from":446,"to":450,"sanitized":275},{"entryPoint":472,"graph":473,"unsanitizedCount":28,"severity":456},"display_tabs (bws_menu\\class-bws-settings.php:285)",{"nodes":474,"edges":479},[475,478],{"id":429,"type":430,"label":476,"file":276,"line":477},"$_REQUEST['bws_active_tab']",295,{"id":433,"type":434,"label":435,"file":276,"line":477,"wp_function":437},[480],{"from":429,"to":433,"sanitized":275},{"entryPoint":482,"graph":483,"unsanitizedCount":28,"severity":456},"\u003Cclass-bws-settings> (bws_menu\\class-bws-settings.php:0)",{"nodes":484,"edges":487},[485,486],{"id":429,"type":430,"label":476,"file":276,"line":477},{"id":433,"type":434,"label":435,"file":276,"line":477,"wp_function":437},[488],{"from":429,"to":433,"sanitized":275},{"entryPoint":490,"graph":491,"unsanitizedCount":28,"severity":456},"bws_go_pro_tab_show (bws_menu\\deprecated.php:225)",{"nodes":492,"edges":497},[493,495],{"id":429,"type":430,"label":440,"file":405,"line":494},227,{"id":433,"type":434,"label":435,"file":405,"line":496,"wp_function":437},267,[498],{"from":429,"to":433,"sanitized":275},{"entryPoint":500,"graph":501,"unsanitizedCount":28,"severity":456},"\u003Cdeprecated> (bws_menu\\deprecated.php:0)",{"nodes":502,"edges":505},[503,504],{"id":429,"type":430,"label":440,"file":405,"line":494},{"id":433,"type":434,"label":435,"file":405,"line":496,"wp_function":437},[506],{"from":429,"to":433,"sanitized":275},{"entryPoint":508,"graph":509,"unsanitizedCount":28,"severity":456},"sndr_admin_mail_send (sender.php:481)",{"nodes":510,"edges":518},[511,514,515,517],{"id":429,"type":430,"label":512,"file":212,"line":513},"$_POST['sndr_subject']",638,{"id":433,"type":434,"label":435,"file":212,"line":513,"wp_function":437},{"id":439,"type":430,"label":516,"file":212,"line":385},"$_POST['sndr_content']",{"id":443,"type":434,"label":435,"file":212,"line":385,"wp_function":437},[519,520],{"from":429,"to":433,"sanitized":275},{"from":439,"to":443,"sanitized":275},{"entryPoint":522,"graph":523,"unsanitizedCount":28,"severity":456},"sndr_report_actions (sender.php:784)",{"nodes":524,"edges":532},[525,528],{"id":429,"type":430,"label":526,"file":212,"line":527},"$_GET (x4)",821,{"id":433,"type":434,"label":529,"file":212,"line":530,"wp_function":531},"query() [SQLi]",823,"query",[533],{"from":429,"to":433,"sanitized":275},{"entryPoint":535,"graph":536,"unsanitizedCount":28,"severity":456},"\u003Csender> (sender.php:0)",{"nodes":537,"edges":544},[538,539,540,541,542,543],{"id":429,"type":430,"label":512,"file":212,"line":513},{"id":433,"type":434,"label":435,"file":212,"line":513,"wp_function":437},{"id":439,"type":430,"label":516,"file":212,"line":385},{"id":443,"type":434,"label":435,"file":212,"line":385,"wp_function":437},{"id":446,"type":430,"label":526,"file":212,"line":527},{"id":450,"type":434,"label":529,"file":212,"line":530,"wp_function":531},[545,546,547],{"from":429,"to":433,"sanitized":275},{"from":439,"to":443,"sanitized":275},{"from":446,"to":450,"sanitized":275},{"entryPoint":549,"graph":550,"unsanitizedCount":27,"severity":561},"report_list (includes\\class-sndr-report-list.php:258)",{"nodes":551,"edges":559},[552,555],{"id":429,"type":430,"label":553,"file":297,"line":554},"$_REQUEST",287,{"id":433,"type":434,"label":556,"file":297,"line":557,"wp_function":558},"get_results() [SQLi]",310,"get_results",[560],{"from":429,"to":433,"sanitized":274},"high",{"entryPoint":563,"graph":564,"unsanitizedCount":103,"severity":561},"show_report (includes\\class-sndr-report-list.php:354)",{"nodes":565,"edges":578},[566,568,569,571,574],{"id":429,"type":430,"label":553,"file":297,"line":567},359,{"id":433,"type":434,"label":556,"file":297,"line":306,"wp_function":558},{"id":439,"type":430,"label":447,"file":297,"line":570},389,{"id":443,"type":572,"label":573,"file":297,"line":570},"transform","→ subscribers_pagination()",{"id":446,"type":434,"label":575,"file":297,"line":576,"wp_function":577},"get_var() [SQLi]",456,"get_var",[579,580,581],{"from":429,"to":433,"sanitized":275},{"from":439,"to":443,"sanitized":274},{"from":443,"to":446,"sanitized":274},{"entryPoint":583,"graph":584,"unsanitizedCount":103,"severity":561},"\u003Cclass-sndr-report-list> (includes\\class-sndr-report-list.php:0)",{"nodes":585,"edges":595},[586,587,588,589,591,592,593],{"id":429,"type":430,"label":447,"file":297,"line":554},{"id":433,"type":434,"label":556,"file":297,"line":557,"wp_function":558},{"id":439,"type":430,"label":553,"file":297,"line":554},{"id":443,"type":434,"label":575,"file":297,"line":590,"wp_function":577},344,{"id":446,"type":430,"label":447,"file":297,"line":570},{"id":450,"type":572,"label":573,"file":297,"line":570},{"id":594,"type":434,"label":575,"file":297,"line":576,"wp_function":577},"n6",[596,597,598,599],{"from":429,"to":433,"sanitized":275},{"from":439,"to":443,"sanitized":275},{"from":446,"to":450,"sanitized":274},{"from":450,"to":594,"sanitized":274},{"summary":601,"deductions":602},"The sender plugin version 1.4.1 exhibits a generally good security posture, with a significant majority of SQL queries using prepared statements and a high percentage of output properly escaped. The static analysis also shows a healthy number of nonce and capability checks relative to the identified entry points. However, there are concerns indicated by the taint analysis, specifically three flows with unsanitized paths. While none were classified as critical or high severity, these represent potential avenues for vulnerabilities if exploited correctly.\n\nThe vulnerability history reveals a single medium-severity CVE in the past, which was related to Cross-Site Scripting. The fact that this is not currently unpatched is positive, but the historical presence of such vulnerabilities suggests a need for continued vigilance in code review, especially concerning input sanitization. The limited number of known CVEs is a positive indicator, but the presence of unsanitized taint flows warrants attention.\n\nIn conclusion, the sender plugin has strong defenses in place regarding prepared statements and output escaping. The main area of concern lies in the identified unsanitized taint flows, which, despite not currently being flagged as critical, require investigation and remediation. The historical CVE also points to the importance of robust input validation. Overall, while the plugin is not inherently insecure, these specific findings represent potential risks that should be addressed.",[603,606,609],{"reason":604,"points":605},"Taint flows with unsanitized paths (High severity x3)",15,{"reason":607,"points":608},"3 flows with unsanitized paths",5,{"reason":610,"points":608},"1 medium CVE history (Improper Neutralization of Input During Web Page Generatio","2026-03-16T21:20:03.744Z",{"wat":613,"direct":618},{"assetPaths":614,"generatorPatterns":615,"scriptPaths":616,"versionParams":617},[],[],[],[],{"cssClasses":619,"htmlComments":620,"htmlAttributes":621,"restEndpoints":622,"jsGlobals":623,"shortcodeOutput":624},[],[],[],[],[],[]]