pCoLaSD

holzhannes

This plugin configures WordPress and WordPress MU to use a SMTP server when sending emails instead of the default PHP <code>mail()</code> function.
You will configure your SMTP settings in your <code>wp-config.php</code> file instead of the settings page. 
The advantage is that no admin of your blog can read the settings. 
And you only have to place your settings once in cases of a WordPress MU installation.
A sample configuration:
<pre><code>/**
 * WordPress SMTP server
 */
define('WP_SMTP_HOST', 'mail.example.com');
define('WP_SMTP_PORT', 25); // obligatory - default: 25
define('WP_SMTP_ENCRYPTION', 'tls'); // obligatory ('tls' or 'ssl') - default: no encryption
define('WP_SMTP_USER', 'username'); // obligatory - default: no user
define('WP_SMTP_PASSWORD', 'password'); // obligatory - default: no password
define('WP_SMTP_FROM', 'John Doe <john.doe@example.com>'); // obligatory - default: no custom from address
define('WP_SMTP_REPLYTO', 'Jane Doe <jane.doe@example.com>'); // obligatory - default: no custom reply to address
</code></pre>

WP SMTP Config

Configure an external SMTP server in your config file.

Benjamin Buddle

I have issues with my hosting service not allowing me to easily set the ‘From line’ for my server email. Whenever a new user signs up they see username@hostingservice.com even though they should see user@site.com. Before Send From you would be required to modify your installation of WordPress just about every time you do an update. No longer! With Send From, you simply go into your admin panel and set what the end user will see on their emails from line.
<h3>Support Questions</h3>
If there are any issues that crop up, I will be happy to take a look at solving them. However, due to many factors, I can’t offer active support for the plugin.
<h3>Security</h3>
CVE: CVE-2025-46469 – Cross-site scripting (Stored XSS) in plugin settings.
Summary: A stored XSS issue was reported in older versions of this plugin where un-sanitized input saved in plugin options could later be rendered into the admin interface without proper escaping. The repository has been updated to sanitize incoming option values and escape output when rendering form fields. The plugin also validates the test-send email address.
Mitigation applied in this repository: 
– Sanitize email values with WordPress’ sanitize_email() before saving. 
– Sanitize name fields with sanitize_text_field() before saving. 
– Escape values when printed into HTML attributes using esc_attr(). 
– Validate test-send addresses with is_email() and refuse to save invalid addresses.

Send From

Simple and effective

Plugin for modifying the from line on all emails coming from WordPress.

WP SMTP Config vs Send From