[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcP5Sd1PmZ2TlFE8wNrhAAhA43l__uz-RlPqx1u7hEZw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":71,"crawl_stats":36,"alternatives":79,"analysis":181,"fingerprints":423},"wp-reroute-email","WP Reroute Email","1.5.2","Sajjad Hossain","https:\u002F\u002Fprofiles.wordpress.org\u002Fmsh134\u002F","\u003Cp>This plugin intercepts all outgoing emails from a WordPress site, sent using the wp_mail() function, and reroutes them to a predefined configurable email address. This is useful in case where you do not want email sent from a WordPress site to reach the users. For an example, to resolve an issue you downloaded production database to your development site and you want no email is sent to production users when testing. You may enable this plugin in development server and reroute emails to your given email address.\u003C\u002Fp>\n\u003Cp>WP Reroute Email provides options for adding your own text or the recipients address at the bottom of the mail.\u003C\u002Fp>\n\u003Cp>You may also save a copy of the email to database and view them from the interface.\u003C\u002Fp>\n\u003Cp>Now, you will be able to disable rerouting based on the subject texts.\u003C\u002Fp>\n","This plugin reroutes all outgoing emails from a WordPress site (sent using the wp_mail() function) to a predefined configurable email address.",1000,28119,100,9,"2025-07-06T06:59:00.000Z","6.8.5","",[19,20,21,22],"developer-tool","development-server","email","mail","http:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fwp-reroute-email\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-reroute-email.1.5.2.zip",98,3,0,"2023-07-05 00:00:00","2026-03-15T15:16:48.613Z",[31,47,60],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":38,"severity":39,"cvss_score":40,"cvss_vector":41,"vuln_type":42,"published_date":28,"updated_date":43,"references":44,"days_to_patch":46},"CVE-2023-3168","wp-reroute-email-unauthenticated-stored-cross-site-scripting-via-email-subject","WP Reroute Email \u003C= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via Email Subject","The WP Reroute Email plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.4.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=1.4.9","1.5.0","high",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-01-22 19:56:02",[45],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F4a0e962b-b6a0-4179-91d0-5ede508a9895?source=api-prod",202,{"id":48,"url_slug":49,"title":50,"description":51,"plugin_slug":4,"theme_slug":36,"affected_versions":52,"patched_in_version":53,"severity":39,"cvss_score":40,"cvss_vector":54,"vuln_type":55,"published_date":56,"updated_date":43,"references":57,"days_to_patch":59},"CVE-2023-27605","wp-reroute-email-authenticated-administrator-sql-injection","WP Reroute Email \u003C= 1.4.6 - Authenticated (Administrator+) SQL Injection","The WP Reroute Email plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in versions up to, and including, 1.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","\u003C=1.4.6","1.4.8","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","2023-04-14 00:00:00",[58],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F395a8ca6-78b8-43f2-8e8c-896702b5da0d?source=api-prod",284,{"id":61,"url_slug":62,"title":63,"description":64,"plugin_slug":4,"theme_slug":36,"affected_versions":52,"patched_in_version":53,"severity":65,"cvss_score":66,"cvss_vector":67,"vuln_type":68,"published_date":56,"updated_date":43,"references":69,"days_to_patch":59},"CVE-2023-27606","wp-reroute-email-cross-site-request-forgery","WP Reroute Email \u003C= 1.4.6 - Cross-Site Request Forgery","The WP Reroute Email plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.6. This is due to missing or incorrect nonce validation in the settings.php file. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)",[70],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F9c3a047f-be12-4308-a4a5-fbbbc37f674d?source=api-prod",{"slug":72,"display_name":7,"profile_url":8,"plugin_count":73,"total_installs":74,"avg_security_score":75,"avg_patch_time_days":76,"trust_score":77,"computed_at":78},"msh134",2,2000,99,595,78,"2026-04-03T23:06:05.439Z",[80,100,115,139,160],{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":27,"downloaded":88,"rating":13,"num_ratings":89,"last_updated":17,"tested_up_to":90,"requires_at_least":91,"requires_php":92,"tags":93,"homepage":97,"download_link":98,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":99},"change-administration-email","Change Administration Email","1.0.3","Plugin Critic","https:\u002F\u002Fprofiles.wordpress.org\u002Fplugincritic\u002F","\u003Cp>Having trouble changing or confirming your General Settings Administration Email Address?\u003C\u002Fp>\n\u003Cp>A second notice with “Confirm Immediately” is added to update the primary site email without needing to click the confirmation link in the email sent from WordPress.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002F182EOHmawV8?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>Submit any support requests to \u003Ca href=\"https:\u002F\u002Fplugincritic.com\u002Fcontact\u002F\" rel=\"nofollow ugc\">https:\u002F\u002Fplugincritic.com\u002Fcontact\u002F\u003C\u002Fa>\u003C\u002Fp>\n","Change the Site's Administration Email Address on the General Settings page without the confirmation email.",1842,1,"6.6.5","6.4","8.0",[94,95,21,96],"administration","developer-tools","settings","https:\u002F\u002Fplugincritic.com\u002Fplugin\u002Fchange-administration-email\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchange-administration-email.1.0.3.zip","2026-03-15T10:48:56.248Z",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":27,"downloaded":108,"rating":27,"num_ratings":27,"last_updated":17,"tested_up_to":109,"requires_at_least":110,"requires_php":111,"tags":112,"homepage":113,"download_link":114,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":99},"email-tools","FS Email Tools","1.2.4","Firdaus Zahari","https:\u002F\u002Fprofiles.wordpress.org\u002Ffsylum\u002F","\u003Cp>The plugin provides a number of tools to modify the behaviour of outgoing emails from your site. This is particularly useful if you are trying to debug any email issues that are happening.\u003C\u002Fp>\n\u003Cp>Features that this plugin offers includes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatic rerouting for all outgoing emails to any number of the specified email address.\u003C\u002Fli>\n\u003Cli>Logging outgoing emails into the database to be viewed later.\u003C\u002Fli>\n\u003Cli>Adding specified email addresses as BCC for all outgoing emails.\u003C\u002Fli>\n\u003C\u002Ful>\n","Collection of tools to interact with emails in WordPress including email rerouting, outgoing email logging to the database, and automatic BCC to speci &hellip;",2680,"6.2.9","5.6","7.3",[19,21,22],"https:\u002F\u002Fgithub.com\u002Ffsylum\u002Ffs-email-tools","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Femail-tools.1.2.4.zip",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":123,"downloaded":124,"rating":125,"num_ratings":126,"last_updated":127,"tested_up_to":128,"requires_at_least":129,"requires_php":130,"tags":131,"homepage":136,"download_link":137,"security_score":75,"vuln_count":73,"unpatched_count":27,"last_vuln_date":138,"fetched_at":29},"wp-mail-smtp","WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin","4.7.1","Syed Balkhi","https:\u002F\u002Fprofiles.wordpress.org\u002Fsmub\u002F","\u003Ch3>WordPress Mail SMTP Plugin\u003C\u002Fh3>\n\u003Cp>Is your WordPress site not sending emails? You’re not alone. 3+ million websites use WP Mail SMTP to send emails reliably.\u003C\u002Fp>\n\u003Cp>Our goal is to make email deliverability easy so that your emails always reach the inbox.\u003C\u002Fp>\n\u003Cp>WP Mail SMTP fixes your email deliverability issues by reconfiguring WordPress to use a proper SMTP provider when sending emails.\u003C\u002Fp>\n\u003Cp>Best of all, our easy-to-use Setup Wizard and detailed documentation guide you through the process.\u003C\u002Fp>\n\u003Cp>WP Mail SMTP is free and has everything you need to reliably send your WordPress emails!\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">\u003Cstrong>WP Mail SMTP Pro\u003C\u002Fstrong>\u003C\u002Fa> unlocks even more powerful features like email logging, advanced email reporting and stats, backup connections, email alerts, smart conditional routing, and much more.\u003C\u002Fp>\n\u003Cp>\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FQYJuPyiKKZc?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Ch4>What is SMTP?\u003C\u002Fh4>\n\u003Cp>SMTP (Simple Mail Transfer Protocol) is an industry-standard for sending emails. Proper SMTP configuration helps increase email deliverability by adding authentication to the emails sent from your site.\u003C\u002Fp>\n\u003Cp>Popular email clients like Gmail, Yahoo, Office 365, and Zoho are in a constant battle with email spammers, so they check whether emails are originating from a genuine sender. If the proper authentication isn’t there, emails either go in the SPAM folder or, worse, disappear.\u003C\u002Fp>\n\u003Cp>This is a problem for a lot of WordPress sites. By default, WordPress uses the PHP mail function to send emails generated by WordPress or any contact form plugin like \u003Ca href=\"https:\u002F\u002Fwpforms.com\u002F?utm_source=wprepo-wpmailsmtp&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">WPForms\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>But most \u003Ca href=\"https:\u002F\u002Fwww.wpbeginner.com\u002Fwordpress-hosting\u002F\" rel=\"nofollow ugc\">WordPress hosting companies\u003C\u002Fa> don’t have their servers properly configured for sending PHP emails.\u003C\u002Fp>\n\u003Cp>This is why WordPress emails aren’t delivered.\u003C\u002Fp>\n\u003Ch4>How does WP Mail SMTP work?\u003C\u002Fh4>\n\u003Cp>WP Mail SMTP plugin easily resolves email delivery problems by changing the way your WordPress site sends email. We reconfigure the \u003Ccode>wp_mail()\u003C\u002Fcode> function to use proper SMTP host credentials or an SMTP mail provider.\u003C\u002Fp>\n\u003Cp>With our built-in SMTP mail provider integrations (recommended), emails are sent using the provider’s direct API. Even if your web host is blocking SMTP ports, your emails will still be sent successfully.\u003C\u002Fp>\n\u003Cp>This helps you fix all \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fwordpress-not-sending-email\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">WordPress not sending email\u003C\u002Fa> issues.\u003C\u002Fp>\n\u003Cp>WP Mail SMTP plugin includes many different SMTP mailers:\u003C\u002Fp>\n\u003Col>\n\u003Cli>SendLayer \u003Cstrong>(#1 Recommended)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>SMTP.com \u003Cstrong>(Recommended)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Brevo (formerly Sendinblue) SMTP \u003Cstrong>(Recommended)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Gmail SMTP (Gmail, Google Workspace, G Suite)\u003C\u002Fli>\n\u003Cli>Elastic Email\u003C\u002Fli>\n\u003Cli>Mailgun SMTP\u003C\u002Fli>\n\u003Cli>Mailjet SMTP\u003C\u002Fli>\n\u003Cli>SendGrid SMTP\u003C\u002Fli>\n\u003Cli>Postmark SMTP\u003C\u002Fli>\n\u003Cli>SparkPost SMTP\u003C\u002Fli>\n\u003Cli>SMTP2GO\u003C\u002Fli>\n\u003Cli>Microsoft SMTP One-Click Setup (Outlook.com and Office 365) \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">[Pro]\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Amazon SES SMTP \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">[Pro]\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Zoho Mail SMTP \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">[Pro]\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Other SMTP\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>For most options, you can specify the “from name” and “email address” for outgoing emails too.\u003C\u002Fp>\n\u003Cp>All of these powerful features make WP Mail SMTP the best SMTP solution for WordPress.\u003C\u002Fp>\n\u003Cp>If you don’t know which mailer to choose, see our \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fdocs\u002Fa-complete-guide-to-wp-mail-smtp-mailers\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">Complete Guide to WP Mail SMTP Mailers\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>SendLayer\u003C\u002Fh4>\n\u003Cp>SendLayer is our #1 recommended transactional email service.\u003C\u002Fp>\n\u003Cp>Its affordable pricing and simple setup make it the perfect choice for sending emails from WordPress. It also has open and click tracking and email logs.\u003C\u002Fp>\n\u003Cp>SendLayer is reliable, fast, and easy to set up. You can send hundreds of emails for free when you sign up for a trial.\u003C\u002Fp>\n\u003Cp>Read our \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fdocs\u002Fhow-to-set-up-the-sendlayer-mailer-in-wp-mail-smtp\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">SendLayer documentation\u003C\u002Fa> for more details.\u003C\u002Fp>\n\u003Ch4>SMTP.COM\u003C\u002Fh4>\n\u003Cp>SMTP.com is a recommended transactional email service.\u003C\u002Fp>\n\u003Cp>With over 22 years of email delivery expertise, SMTP.com has a reputation for being one of the most reliable senders on the internet.\u003C\u002Fp>\n\u003Cp>You can start sending emails in minutes and benefit from 50,000 free emails in your first 30 days.\u003C\u002Fp>\n\u003Cp>Read our \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fdocs\u002Fhow-to-set-up-the-smtp-com-mailer-in-wp-mail-smtp\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">SMTP.com documentation\u003C\u002Fa> for more details.\u003C\u002Fp>\n\u003Ch4>Brevo (formerly Sendinblue) SMTP\u003C\u002Fh4>\n\u003Cp>Brevo is a recommended transactional email service. It serves 80,000+ companies worldwide.\u003C\u002Fp>\n\u003Cp>Brevo is reliable, fast, and gives you 300 free emails per day.\u003C\u002Fp>\n\u003Cp>Read our \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fdocs\u002Fhow-to-set-up-the-sendinblue-mailer-in-wp-mail-smtp\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">Brevo documentation\u003C\u002Fa> for more details.\u003C\u002Fp>\n\u003Ch3>WP Mail SMTP PRO\u003C\u002Fh3>\n\u003Cp>In addition to native Microsoft, Amazon SES, and Zoho Mail integrations, WP Mail SMTP Pro provides access to many other powerful features.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">Click here to purchase WP Mail SMTP Pro now!\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Email Log\u003C\u002Fh3>\n\u003Cp>Email logging is a powerful feature that keeps a record of all sent emails in WordPress. Email logging helps you to archive, audit, resend, or test email delivery and formatting.\u003C\u002Fp>\n\u003Cp>Our \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Flog-emails-wordpress\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">WordPress email logs\u003C\u002Fa> also include:\u003C\u002Fp>\n\u003Ch4>Email Log Details\u003C\u002Fh4>\n\u003Cp>Our email logs provide a complete history of all emails sent from WordPress. View the subject, sender, recipients, content, headers, open and click rates, delivery status, source plugin, and more!\u003C\u002Fp>\n\u003Ch4>Resend Emails\u003C\u002Fh4>\n\u003Cp>Resend emails individually or in bulk, whether they failed or were delivered successfully. You can also forward important emails to an alternative email address.\u003C\u002Fp>\n\u003Ch4>And many more Email Log Features\u003C\u002Fh4>\n\u003Cp>Store all email attachments, export email logs, print emails, see delivery status, and more.\u003C\u002Fp>\n\u003Ch3>Email Reports\u003C\u002Fh3>\n\u003Cp>Review weekly sent and failed emails in a dashboard chart.\u003C\u002Fp>\n\u003Cp>Email reports make it easy to track deliverability and engagement. Open rates and click-through rates are grouped by subject line, making it easy to see the performance of your campaigns or notifications.\u003C\u002Fp>\n\u003Ch4>Weekly Email Summary\u003C\u002Fh4>\n\u003Cp>Get statistics about WordPress emails, including how many emails are being sent and which ones are being opened and clicked. The Summary also shows you deliverability statistics without the need to log in to WordPress to check them.\u003C\u002Fp>\n\u003Ch4>Track Email Opens and Clicks\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002Fenable-wordpress-email-tracking\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">View open and click stats for WordPress emails\u003C\u002Fa>, grouped by subject line in your Email Report.\u003C\u002Fp>\n\u003Ch3>Email Alerts\u003C\u002Fh3>\n\u003Cp>If your emails stop sending, get notified instantly via Slack, Microsoft Teams, Discord, SMS\u002F Twilio, webhooks, or email (via secure API).\u003C\u002Fp>\n\u003Cp>In combination with our email logging and resending features, Email Alerts ensure that no important email will ever be lost.\u003C\u002Fp>\n\u003Ch3>Backup Connection\u003C\u002Fh3>\n\u003Cp>Configure an extra connection that kicks in if your primary connection fails. WP Mail SMTP automatically detects connection issues and automatically switches to the backup mailer. It will also automatically retry emails that failed.\u003C\u002Fp>\n\u003Ch3>Smart Conditional Routing\u003C\u002Fh3>\n\u003Cp>Create criteria to send different types of emails using different mailers. Filter by the contents of the email Subject or Message, From or To addresses, the plugin that generated the email, and more.\u003C\u002Fp>\n\u003Cp>This allows you to mix transactional and marketing providers to improve deliverability.\u003C\u002Fp>\n\u003Ch3>Rate Limiting\u003C\u002Fh3>\n\u003Cp>Control the number of emails your WordPress site sends in a specific amount of time so you stay within your SMTP provider’s rate limits.\u003C\u002Fp>\n\u003Cp>WP Mail SMTP allows you to specify the maximum number of emails that will be sent every minute, hour, day, week, or month and automatically queues emails to stay within those limits.\u003C\u002Fp>\n\u003Ch3>Optimized Email Sending\u003C\u002Fh3>\n\u003Cp>Are emails slowing down your site? Let WP Mail SMTP queue your emails for better performance.\u003C\u002Fp>\n\u003Cp>With optimized sending, emails are queued in the background and sent when your server has sufficient resources, avoiding bottlenecks that can slow down your site.\u003C\u002Fp>\n\u003Ch3>Manage WordPress Emails and Notifications\u003C\u002Fh3>\n\u003Cp>Control the default notifications WordPress sends. Use a simple switch to disable specific types of notifications if you don’t want to receive them.\u003C\u002Fp>\n\u003Ch3>WordPress Multisite\u003C\u002Fh3>\n\u003Ch4>WordPress Multisite Network Settings\u003C\u002Fh4>\n\u003Cp>For users running a multisite network, save time with a centralized location to easily configure your SMTP settings for all sites.\u003C\u002Fp>\n\u003Ch4>Manage Multisite Email Logs Easily\u003C\u002Fh4>\n\u003Cp>Network Admins can view and manage email logs for subsites with easy switching and dashboard views.\u003C\u002Fp>\n\u003Ch3>Expert Support\u003C\u002Fh3>\n\u003Cp>We provide \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Ftopic\u002Fwp-mail-smtp-support-policy\u002F\" rel=\"ugc\">limited support\u003C\u002Fa> on the WordPress.org forums. World-class one-on-one email support is available to \u003Ca href=\"https:\u002F\u002Fwpmailsmtp.com\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">WP Mail SMTP Pro\u003C\u002Fa> users.\u003C\u002Fp>\n\u003Ch4>White Glove Setup\u003C\u002Fh4>\n\u003Cp>If you’re not sure how to fix your emails, sit back and relax. We’ll set up WP Mail SMTP for you!\u003C\u002Fp>\n\u003Cp>White Glove Setup includes installation, configuration in WordPress, DNS configuration, full mailer setup, and testing. White Glove Setup is available for our recommended mailers: SendLayer, Brevo, and SMTP.com.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>WP Mail SMTP plugin was originally created by Callum Macdonald. It is now owned and maintained by the team behind \u003Ca href=\"https:\u002F\u002Fwpforms.com\u002F?utm_source=wprepo-wpmailsmtp&utm_medium=link&utm_campaign=liteplugin&utm_content=readme\" rel=\"nofollow ugc\">WPForms\u003C\u002Fa> – the best drag & drop form builder for WordPress.\u003C\u002Fp>\n\u003Cp>You can try the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpforms-lite\u002F\" rel=\"ugc\">free version of WPForms plugin\u003C\u002Fa> to see why it’s the best in the market.\u003C\u002Fp>\n","Make email delivery easy for WordPress. Connect with SMTP, Gmail, Outlook, SendGrid, Mailgun, SES, Zoho, + more. Rated #1 WordPress SMTP Email plugin.",4000000,76682108,96,5071,"2025-11-26T15:18:00.000Z","6.9.4","5.5","7.4",[21,132,133,134,135],"email-logs","gmail","outlook","smtp","https:\u002F\u002Fwpmailsmtp.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-mail-smtp.4.7.1.zip","2024-07-19 00:00:00",{"slug":140,"name":141,"version":142,"author":143,"author_profile":144,"description":145,"short_description":146,"active_installs":147,"downloaded":148,"rating":13,"num_ratings":73,"last_updated":149,"tested_up_to":128,"requires_at_least":150,"requires_php":151,"tags":152,"homepage":158,"download_link":159,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":36,"fetched_at":29},"hostinger-reach","Hostinger Reach – AI-Powered Email Marketing for WordPress","1.4.0","Hostinger","https:\u002F\u002Fprofiles.wordpress.org\u002Fhostinger\u002F","\u003Cp>Hostinger Reach is your all-in-one email marketing plugin, built for creators, small businesses, and website owners. It helps you grow your audience and stay connected through eye-catching, on-brand emails powered by AI and seamlessly integrated with your site.\u003C\u002Fp>\n\u003Ch4>🚀 Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>AI-powered email templates:\u003C\u002Fstrong> Describe your idea and let AI generate a ready-to-send email for you in seconds. Effortlessly tailor your templates and content to your brand look and voice.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Subscriber collection:\u003C\u002Fstrong> Create subscriber capture forms or connect popular plugins like Contact Form 7 or WPForms to start collecting contacts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic contact sync:\u003C\u002Fstrong> Reach syncs all subscribers to your dashboard in real time – no manual exports or spreadsheets needed.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email sending:\u003C\u002Fstrong> Use your domain and custom sender address for professional, trusted communication.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Email campaigns:\u003C\u002Fstrong> Launch targeted email campaigns to engage your audience.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time analytics:\u003C\u002Fstrong> Monitor opens, clicks, and other key metrics as they happen to fine-tune performance with every send.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Built-in deliverability:\u003C\u002Fstrong> Count on Hostinger’s proven infrastructure to ensure your emails land in inboxes, not spam folders.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🔌 Seamless Integration\u003C\u002Fh4>\n\u003Cp>Reach lets you create forms directly within the native WordPress Block Editor – no extra plugins required.\u003C\u002Fp>\n\u003Cp>Reach is also fully compatible with these popular form builders and plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>WPForms\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Contact Form 7\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Elementor\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WS Form\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sure Forms\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Ninja Forms\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Forminator\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Thrive Leads\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>OptinMonster\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Brave Popup Builder\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>More integrations are coming soon.\u003C\u002Fp>\n\u003Ch4>📬 Deliverability & Compliance: Handled for You\u003C\u002Fh4>\n\u003Cp>Reach takes care of the technical setup, ensuring your emails land in inboxes, not spam folders.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Automatic SPF, DKIM, & DMARC setup\u003C\u002Fstrong> – Reach configures industry-standard email authentication protocols for you, so you don’t have to worry about deliverability issues.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Trusted infrastructure\u003C\u002Fstrong> – Reach sends your campaigns through reliable, high-reputation servers to keep your emails landing in inboxes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>100% compliant templates\u003C\u002Fstrong> – Our AI generates templates that fully comply with CAN-SPAM and GDPR, including sender information and unsubscribe options.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Auto-managed unsubscribes\u003C\u002Fstrong> – Every email includes an unsubscribe link that Reach handles automatically. When contacts unsubscribe, Reach removes them from future campaigns without any effort from you.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>💸 Plans & Pricing: Start Free, Grow Without Limits\u003C\u002Fh4>\n\u003Cp>Reach supports creators and businesses at every stage. Start for free, scale as your audience grows, and pay only when you need to.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Reach offers a free plan for one year – perfect for getting started.\u003C\u002Fli>\n\u003Cli>Paid plans provide higher sending limits based on your contact list size and monthly email volume.\u003C\u002Fli>\n\u003Cli>Every paid plan removes the Reach logo from your emails and includes five free AI-generated messages each month.\u003C\u002Fli>\n\u003Cli>New customers get 20 free AI messages and can purchase more anytime – no subscriptions or bundles required.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>🆓 What’s Included in the Free Plan?\u003C\u002Fh4>\n\u003Cp>Start your email marketing journey with our feature-rich free plan designed for beginners and small audiences:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Email up to 100 unique subscribers\u002Fmonth\u003C\u002Fstrong> – Perfect for building your first list or staying in touch with your early subscribers. Your unique recipients limit resets on the 1st of every month.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Send up to 200 emails\u002Fmonth\u003C\u002Fstrong> – Enough to reach your audience and learn what works best. Your total email limit resets on the 1st of every month.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>AI content editor & visual builder\u003C\u002Fstrong> – Easily customize your emails’ content, images, and branding.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unlimited contact storage\u003C\u002Fstrong> – Reach does not limit your contact list, so you can consistently grow your audience without worrying about lost data.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WordPress contact sync\u003C\u002Fstrong> – Seamlessly import subscribers from your site to your Reach mailing list.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>24\u002F7 customer support\u003C\u002Fstrong> – Get help anytime, even on the free plan.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Our free plan gives you everything you need to launch your first campaign, grow your audience, and see real results – no credit card required.\u003C\u002Fp>\n\u003Ch4>💡 Why Reach?\u003C\u002Fh4>\n\u003Cp>With over 20 years of experience helping people succeed online, Hostinger created Reach to make professional email marketing simple, fast, and effective – especially for beginners.\u003C\u002Fp>\n\u003Ch4>External services\u003C\u002Fh4>\n\u003Cp>This plugin connects to Hostinger Reach API service to collect and share the next information:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Collect your Reach account overview stats and show them in the wp-admin dashboard\u003C\u002Fli>\n\u003Cli>Automatically sync new subscribers from your site to Reach\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Authentication with Hostinger Reach to share ecrypted keys, secure, and protect the communication channel\u003C\u002Fp>\n\u003Cp>Hostinger Reach plugin goal is to offer a seamless integration within Hostinger Reach service. Hence, a communication\u003Cbr \u002F>\nbetween the plugin and Hostinger Reach service is a core functionality.\u003C\u002Fp>\n\u003Cp>For more information about Hostinger Reach and our terms and conditions visit:\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.hostinger.com\u002Femail-marketing\" rel=\"nofollow ugc\">Hostinger Reach\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.hostinger.com\u002Flegal\u002Funiversal-terms-of-service-agreement\" rel=\"nofollow ugc\">Hostinger Terms of Service\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Compiled code\u003C\u002Fh4>\n\u003Cp>In order to optimize the plugin and reduce the size of the bundle we minify and compile our JavaScript files.\u003C\u002Fp>\n\u003Cp>For transparency and following the community guidelines you can find the source code inside the \u003Ccode>frontend\u003C\u002Fcode> folder.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>frontend\u002Fvue\u003C\u002Fcode>: Code for the Admin UI\u003C\u002Fli>\n\u003Cli>\u003Ccode>frontend\u002Fblocks\u003C\u002Fcode>: Code for Reach block\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ccode>dist\u003C\u002Fcode>: compiled code\u003C\u002Fp>\n\u003Cp>We include also \u003Ccode>composer.json\u003C\u002Fcode> and \u003Ccode>package.json\u003C\u002Fcode> file showing the dependencies we use in the project.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n","Launch and grow your email marketing effortlessly with Hostinger Reach. Collect contacts, sync subscribers, and send emails – all in one, AI powered.",1000000,232704,"2026-03-10T08:48:00.000Z","6.0","8.1",[153,154,155,156,157],"email-marketing","lead-generation","marketing","newsletter","subscription","https:\u002F\u002Fhostinger.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhostinger-reach.1.4.0.zip",{"slug":161,"name":162,"version":163,"author":164,"author_profile":165,"description":166,"short_description":167,"active_installs":147,"downloaded":168,"rating":125,"num_ratings":169,"last_updated":170,"tested_up_to":128,"requires_at_least":171,"requires_php":130,"tags":172,"homepage":176,"download_link":177,"security_score":178,"vuln_count":179,"unpatched_count":27,"last_vuln_date":180,"fetched_at":29},"mailchimp-for-wp","MC4WP: Mailchimp for WordPress","4.12.0","Danny van Kooten","https:\u002F\u002Fprofiles.wordpress.org\u002Fdvankooten\u002F","\u003Cp>\u003Cem>Allowing your visitors to subscribe to your newsletter should be easy. With this plugin, it finally is.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>This plugins helps you grow your email list in Mailchimp. You can use it to create good looking and accessible sign-up forms or integrate with any other existing form on your WordPress site, like your contact, comment or checkout form.\u003C\u002Fp>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FfZCYPnFybqU?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\n\u003Ch4>Some (but not all) features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\n\u003Cp>Connect with your Mailchimp account in seconds.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Sign-up forms which are good looking, user-friendly and mobile optimized. You have complete control over the form fields and can build your forms using native HTML.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Seamless integration with the following plugins:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WordPress Comment Form\u003C\u002Fli>\n\u003Cli>WordPress Registration Form\u003C\u002Fli>\n\u003Cli>Contact Form 7\u003C\u002Fli>\n\u003Cli>WooCommerce\u003C\u002Fli>\n\u003Cli>Gravity Forms\u003C\u002Fli>\n\u003Cli>Ninja Forms 3\u003C\u002Fli>\n\u003Cli>WPForms\u003C\u002Fli>\n\u003Cli>BuddyPress\u003C\u002Fli>\n\u003Cli>MemberPress\u003C\u002Fli>\n\u003Cli>Events Manager\u003C\u002Fli>\n\u003Cli>Easy Digital Downloads\u003C\u002Fli>\n\u003Cli>Give\u003C\u002Fli>\n\u003Cli>UltimateMember\u003C\u002Fli>\n\u003Cli>HTML Forms\u003C\u002Fli>\n\u003Cli>AffiliateWP\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Is the plugin you want to integrate with not listed above? You can probably still use our \u003Ca href=\"https:\u002F\u002Fwww.mc4wp.com\u002Fkb\u002Fsubscribe-mailchimp-custom-html-form\u002F\" rel=\"nofollow ugc\">custom integration\u003C\u002Fa> feature. Alternatively, the plugin comes with a PHP API to programmatically add a new subscriber to Mailchimp.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.mc4wp.com\u002F\" rel=\"nofollow ugc\">Mailchimp for WordPress Premium\u003C\u002Fa>: Send your WooCommerce orders to Mailchimp so you can see exactly what each subscriber purchased and how much revenue your email campaigns are generating.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>A multitude of available add-on plugins and integrations:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.mc4wp.com\u002F\" rel=\"nofollow ugc\">Mailchimp for WordPress Premium\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmailchimp-top-bar\u002F\" rel=\"ugc\">Mailchimp Top Bar\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fboxzilla\u002F\" rel=\"ugc\">Boxzilla Pop-ups\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Well documented through our \u003Ca href=\"https:\u002F\u002Fwww.mc4wp.com\u002Fkb\u002F\" rel=\"nofollow ugc\">knowledge base\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Developer friendly. For some inspiration, check out our \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fibericode\u002Fmailchimp-for-wordpress\u002Ftree\u002Fmain\u002Fsample-code-snippets\" rel=\"nofollow ugc\">repository of example code snippets\u003C\u002Fa>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Ready for PHP 8.5, but backwards-compatible all the way down to PHP 7.4.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>What is Mailchimp?\u003C\u002Fh4>\n\u003Cp>Mailchimp is a newsletter service that allows you to send out email campaigns to a list of email subscribers. It is free for lists with up to 500 email subscribers, which is why it is the newsletter-service of choice for thousands of small businesses across the globe.\u003C\u002Fp>\n\u003Cp>If you are not yet using Mailchimp, \u003Ca href=\"http:\u002F\u002Feepurl.com\u002FigOGeX\" rel=\"nofollow ugc\">creating an account is 100% free and only takes you about 30 seconds\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>If you need some help in setting up the plugin, you have various options:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Search through our \u003Ca href=\"https:\u002F\u002Fwww.mc4wp.com\u002Fkb\u002F#utm_source=wp-plugin-repo&utm_medium=mailchimp-for-wp&utm_campaign=description\" rel=\"nofollow ugc\">knowledge base\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Open a topic in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fmailchimp-for-wp\" rel=\"ugc\">WordPress.org plugin support forums\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>If you’re a premium user, send an email to the email address listed inside the plugin.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Translations\u003C\u002Fh4>\n\u003Cp>You can \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fmailchimp-for-wp\u002Fstable\u002F\" rel=\"nofollow ugc\">help translate this plugin into your language\u003C\u002Fa> using your WordPress.org account.\u003C\u002Fp>\n\u003Ch4>Development\u003C\u002Fh4>\n\u003Cp>This plugin is being developed on GitHub. If you want to collaborate, please look at \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fibericode\u002Fmailchimp-for-wordpress\" rel=\"nofollow ugc\">ibericode\u002Fmailchimp-for-wordpress\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Customizing the plugin\u003C\u002Fh4>\n\u003Cp>The plugin provides various filter and action hooks that allow you to modify or extend the default behavior. We’re also maintaining a \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fibericode\u002Fmailchimp-for-wordpress\u002Ftree\u002Fmain\u002Fsample-code-snippets\" rel=\"nofollow ugc\">collection of sample code snippets\u003C\u002Fa>.\u003C\u002Fp>\n","The #1 Mailchimp plugin for WordPress. Allows you to add a multitude of newsletter sign-up methods to your site.",72637090,1492,"2026-03-09T08:01:00.000Z","4.6",[21,173,174,156,175],"form","mailchimp","subscribe","https:\u002F\u002Fwww.mc4wp.com\u002F#utm_source=wp-plugin&utm_medium=mailchimp-for-wp&utm_campaign=plugins-page","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmailchimp-for-wp.4.12.0.zip",92,11,"2026-03-10 13:11:15",{"attackSurface":182,"codeSignals":231,"taintFlows":318,"riskAssessment":404,"analyzedAt":422},{"hooks":183,"ajaxHandlers":227,"restRoutes":228,"shortcodes":229,"cronEvents":230,"entryPointCount":27,"unprotectedCount":27},[184,190,195,197,201,205,209,213,219,223],{"type":185,"name":186,"callback":187,"file":188,"line":189},"action","admin_footer","_js_vars","includes\\class-wp-list-table.php",157,{"type":185,"name":191,"callback":192,"file":193,"line":194},"init","updateDB","wp-reroute-email.php",32,{"type":185,"name":191,"callback":191,"file":193,"line":196},33,{"type":185,"name":198,"callback":199,"file":193,"line":200},"admin_menu","add_admin_menu",34,{"type":185,"name":202,"callback":203,"priority":11,"file":193,"line":204},"phpmailer_init","modify_phpmailer_object",35,{"type":185,"name":206,"callback":207,"file":193,"line":208},"admin_enqueue_scripts","enqueueJS",36,{"type":185,"name":210,"callback":211,"file":193,"line":212},"admin_notices","notice",37,{"type":214,"name":215,"callback":216,"priority":217,"file":193,"line":218},"filter","plugin_action_links","add_settings_link",10,44,{"type":214,"name":220,"callback":221,"priority":11,"file":193,"line":222},"wp_mail","modify_mail_message",45,{"type":214,"name":224,"callback":225,"priority":217,"file":193,"line":226},"wpre_ignore_email","check_ignore_email",46,[],[],[],[],{"dangerousFunctions":232,"sqlUsage":233,"outputEscaping":245,"fileOperations":27,"externalRequests":27,"nonceChecks":73,"capabilityChecks":27,"bundledLibraries":317},[],{"prepared":234,"raw":26,"locations":235},6,[236,240,242],{"file":237,"line":238,"context":239},"includes\\db_log_list.class.php",72,"$wpdb->query() with variable interpolation",{"file":237,"line":241,"context":239},79,{"file":237,"line":243,"context":244},177,"$wpdb->get_row() with variable interpolation",{"escaped":246,"rawEcho":200,"locations":247},55,[248,252,254,255,257,259,261,263,265,267,269,271,273,275,277,279,281,283,285,287,289,291,293,294,296,298,300,302,305,307,309,311,313,315],{"file":249,"line":250,"context":251},"db_log.php",50,"raw output",{"file":188,"line":253,"context":251},362,{"file":188,"line":253,"context":251},{"file":188,"line":256,"context":251},363,{"file":188,"line":258,"context":251},411,{"file":188,"line":260,"context":251},462,{"file":188,"line":262,"context":251},463,{"file":188,"line":264,"context":251},464,{"file":188,"line":266,"context":251},469,{"file":188,"line":268,"context":251},859,{"file":188,"line":270,"context":251},1113,{"file":188,"line":272,"context":251},1130,{"file":188,"line":274,"context":251},1139,{"file":188,"line":276,"context":251},1215,{"file":188,"line":278,"context":251},1288,{"file":188,"line":280,"context":251},1291,{"file":188,"line":282,"context":251},1299,{"file":188,"line":284,"context":251},1300,{"file":188,"line":286,"context":251},1301,{"file":188,"line":288,"context":251},1304,{"file":188,"line":290,"context":251},1305,{"file":188,"line":292,"context":251},1306,{"file":237,"line":25,"context":251},{"file":237,"line":295,"context":251},102,{"file":237,"line":297,"context":251},103,{"file":237,"line":299,"context":251},112,{"file":237,"line":301,"context":251},118,{"file":303,"line":304,"context":251},"settings.php",12,{"file":303,"line":306,"context":251},26,{"file":303,"line":308,"context":251},38,{"file":310,"line":217,"context":251},"test.php",{"file":310,"line":312,"context":251},21,{"file":310,"line":314,"context":251},24,{"file":193,"line":316,"context":251},301,[],[319,358,373],{"entryPoint":320,"graph":321,"unsanitizedCount":357,"severity":65},"search_box (includes\\class-wp-list-table.php:346)",{"nodes":322,"edges":351},[323,328,333,337,339,343,345,349],{"id":324,"type":325,"label":326,"file":188,"line":327},"n0","source","$_REQUEST['orderby']",353,{"id":329,"type":330,"label":331,"file":188,"line":327,"wp_function":332},"n1","sink","echo() [XSS]","echo",{"id":334,"type":325,"label":335,"file":188,"line":336},"n2","$_REQUEST['order']",355,{"id":338,"type":330,"label":331,"file":188,"line":336,"wp_function":332},"n3",{"id":340,"type":325,"label":341,"file":188,"line":342},"n4","$_REQUEST['post_mime_type']",357,{"id":344,"type":330,"label":331,"file":188,"line":342,"wp_function":332},"n5",{"id":346,"type":325,"label":347,"file":188,"line":348},"n6","$_REQUEST['detached']",359,{"id":350,"type":330,"label":331,"file":188,"line":348,"wp_function":332},"n7",[352,354,355,356],{"from":324,"to":329,"sanitized":353},false,{"from":334,"to":338,"sanitized":353},{"from":340,"to":344,"sanitized":353},{"from":346,"to":350,"sanitized":353},4,{"entryPoint":359,"graph":360,"unsanitizedCount":27,"severity":372},"\u003Csettings> (settings.php:0)",{"nodes":361,"edges":369},[362,365],{"id":324,"type":325,"label":363,"file":303,"line":364},"$_POST (x7)",15,{"id":329,"type":330,"label":366,"file":303,"line":367,"wp_function":368},"update_option() [Settings Manipulation]",31,"update_option",[370],{"from":324,"to":329,"sanitized":371},true,"low",{"entryPoint":374,"graph":375,"unsanitizedCount":234,"severity":39},"\u003Cclass-wp-list-table> (includes\\class-wp-list-table.php:0)",{"nodes":376,"edges":397},[377,378,379,380,381,382,383,384,385,389,391,393],{"id":324,"type":325,"label":326,"file":188,"line":327},{"id":329,"type":330,"label":331,"file":188,"line":327,"wp_function":332},{"id":334,"type":325,"label":335,"file":188,"line":336},{"id":338,"type":330,"label":331,"file":188,"line":336,"wp_function":332},{"id":340,"type":325,"label":341,"file":188,"line":342},{"id":344,"type":330,"label":331,"file":188,"line":342,"wp_function":332},{"id":346,"type":325,"label":347,"file":188,"line":348},{"id":350,"type":330,"label":331,"file":188,"line":348,"wp_function":332},{"id":386,"type":325,"label":387,"file":188,"line":388},"n8","$_SERVER",1052,{"id":390,"type":330,"label":331,"file":188,"line":280,"wp_function":332},"n9",{"id":392,"type":325,"label":387,"file":188,"line":388},"n10",{"id":394,"type":330,"label":395,"file":188,"line":280,"wp_function":396},"n11","call_user_func() [RCE]","call_user_func",[398,399,400,401,402,403],{"from":324,"to":329,"sanitized":353},{"from":334,"to":338,"sanitized":353},{"from":340,"to":344,"sanitized":353},{"from":346,"to":350,"sanitized":353},{"from":386,"to":390,"sanitized":353},{"from":392,"to":394,"sanitized":353},{"summary":405,"deductions":406},"The 'wp-reroute-email' plugin v1.5.2 exhibits a mixed security posture.  While the static analysis shows a commendable lack of direct attack surface through AJAX, REST API, shortcodes, or cron events, and a reasonable adherence to prepared statements for SQL queries, there are significant concerns.  Specifically, the taint analysis revealed flows with unsanitized paths, and one high-severity taint flow.  This, combined with a substantial vulnerability history including three known CVEs (two high, one medium) for Cross-Site Scripting, SQL Injection, and CSRF, strongly suggests a pattern of insecure coding practices in handling user-supplied or external data. The absence of capability checks in the static analysis is also a notable weakness, as it implies that even unprotected entry points (though none are identified here) could be vulnerable.\n\nDespite the absence of unpatched CVEs at present, the plugin's past indicates a recurring tendency towards vulnerabilities that could be exploited by attackers. The high percentage of properly escaped outputs (62%) is a positive sign, but the remaining 38% are a potential source of XSS.  The presence of two nonce checks is good, but only two for an unknown number of internal operations is minimal.  The lack of direct external HTTP requests is a plus.  Overall, while the plugin has mitigated some common WordPress vulnerabilities in this version, the historical pattern and the specific taint analysis findings warrant caution.",[407,409,412,415,418,420],{"reason":408,"points":304},"High severity taint flow found",{"reason":410,"points":411},"Flows with unsanitized paths found",8,{"reason":413,"points":414},"Past high severity CVEs (2)",20,{"reason":416,"points":417},"Past medium severity CVEs (1)",5,{"reason":419,"points":417},"Output escaping not always proper (38% unescaped)",{"reason":421,"points":217},"No capability checks identified","2026-03-16T18:53:18.421Z",{"wat":424,"direct":433},{"assetPaths":425,"generatorPatterns":427,"scriptPaths":428,"versionParams":430},[426],"\u002Fwp-content\u002Fplugins\u002Fwp-reroute-email\u002Fcss\u002Fwp-reroute-email-styles.css",[],[429],"\u002Fwp-content\u002Fplugins\u002Fwp-reroute-email\u002Fjs\u002Fwp-reroute-email.js",[431,432],"wp-reroute-email.js","wp-reroute-email-styles.css",{"cssClasses":434,"htmlComments":435,"htmlAttributes":436,"restEndpoints":437,"jsGlobals":438,"shortcodeOutput":439},[],[],[],[],[],[]]