Send From for WordPress

I have issues with my hosting service not allowing me to easily set the ‘From line’ for my server email. Whenever a new user signs up they see username@hostingservice.com even though they should see user@site.com. Before Send From you would be required to modify your installation of WordPress just about every time you do an update. No longer! With Send From, you simply go into your admin panel and set what the end user will see on their emails from line.

Support Questions If there are any issues that crop up, I will be happy to take a look at solving them. However, due to many factors, I can’t offer active support for the plugin.

Security CVE: CVE-2025-46469 – Cross-site scripting (Stored XSS) in plugin settings.

Summary: A stored XSS issue was reported in older versions of this plugin where un-sanitized input saved in plugin options could later be rendered into the admin interface without proper escaping. The repository has been updated to sanitize incoming option values and escape output when rendering form fields. The plugin also validates the test-send email address.

Mitigation applied in this repository:

– Sanitize email values with WordPress’ sanitize_email() before saving.

– Sanitize name fields with sanitize_text_field() before saving.

– Escape values when printed into HTML attributes using esc_attr().

– Validate test-send addresses with is_email() and refuse to save invalid addresses.