Send From
Plugin for modifying the from line on all emails coming from WordPress.
The facts
- Rating
- 5★ from 8
- Active installs
- 500+
- Price
- Free
- Last updated
- 10 Oct 2025
- Added
- Dec 2009
- Requires WP
- 5.9
- Tested up to
- WP 6.4.10
- Downloads
- 14,964
Our analysis
AI-assistedSend From is a WordPress plugin that allows you to customise the 'From' email address displayed to users when they receive emails from your site. It addresses issues with hosting services that automatically set the 'From' line to their own domain, ensuring that emails appear to come from your site's domain instead. This plugin is suitable for users who want to maintain a professional appearance in their email communications without modifying WordPress core files after updates.
The plugin provides a straightforward interface in the admin panel where you can set the desired 'From' email address. It includes security measures to prevent common vulnerabilities, ensuring that email addresses are properly sanitized and validated before being saved or displayed.
Best for: This plugin suits WordPress site owners who want to control their email branding.
What it does well
- ✓Allows customisation of the 'From' email address
- ✓Eliminates the need to modify WordPress core files
- ✓Includes security measures against common vulnerabilities
Where it falls short
- •No active support offered for the plugin
- •Security issue reported in older versions
Verdict
Send From provides a simple solution for customising email sender details, though users should be aware of the lack of active support.
From the developer
Benjamin Buddle's own description of Send From, lightly tidied.
I have issues with my hosting service not allowing me to easily set the ‘From line’ for my server email. Whenever a new user signs up they see username@hostingservice.com even though they should see user@site.com. Before Send From you would be required to modify your installation of WordPress just about every time you do an update. No longer! With Send From, you simply go into your admin panel and set what the end user will see on their emails from line.
Support Questions
If there are any issues that crop up, I will be happy to take a look at solving them. However, due to many factors, I can’t offer active support for the plugin.
Security
CVE: CVE-2025-46469 – Cross-site scripting (Stored XSS) in plugin settings.
Summary: A stored XSS issue was reported in older versions of this plugin where un-sanitized input saved in plugin options could later be rendered into the admin interface without proper escaping. The repository has been updated to sanitize incoming option values and escape output when rendering form fields. The plugin also validates the test-send email address.
Mitigation applied in this repository:
– Sanitize email values with WordPress’ sanitize_email() before saving.
– Sanitize name fields with sanitize_text_field() before saving.
– Escape values when printed into HTML attributes using esc_attr().
– Validate test-send addresses with is_email() and refuse to save invalid addresses.