Skip to:
Content
Pages
Categories
Search
Top
Bottom

Reply To: Public Vulnerability notification – false alarm?

@dcavins

Keymaster

Hi, feel free to look at the source code where BP calls PHPMailer:
https://github.com/buddypress/BuddyPress/blob/5.0.0/src/bp-core/classes/class-bp-phpmailer.php#L19

As you can see, unless you are using a plugin that is injecting an older version of PHPMailer on the bp_phpmailer_object filter, BP is using the PHPMailer class included in the WP includes folder. BP isn’t including a copy of the PHPMailer class at all.

Skip to toolbar