PHPMailer is not part of the plugin, it is shipped with WordPress. So it is up to WordPress to keep it up to date. There is a patch already in ticket #37210.
In the mean time, you can create a mu-plugin, include the newer version of PHPMailer here, create an instance and assign it to the global variable $phpmailer. WordPress will then use that instead of its own outdated version. But be aware that WordPress’ version has some changes that are not compatible with the original class, so you might break some plugins.
Related Posts:
- Why users disable the WordPress update?
- Upgrading WordPress 4.0 asks for FTP password
- How can we deal with unmaintained plugins with vulnerabilities?
- Malware installation during plugin update?
- Vulnerability Concern From the Plugin or From Not Updating the Plugin?
- How can I disable new plugin and theme install, but allow updates?
- Updates for a private plugin?
- to perform the requested action wordpress needs to access your web server. please enter your ftp
- Disable update notification for individual plugins
- What security concerns should I have when setting FS_METHOD to “direct” in wp-config?
- How can I stop WordPress from prompting me to enter FTP information when doing updates?
- What Are Security Best Practices for WordPress Plugins and Themes? [closed]
- Are WordPress Plugins essential?
- what is the correct way to update a plugin via tortoise svn to the repository?
- I found this in a plugin. What does it do? is it dangerous?
- An unexpected error occurred. Something may be wrong with WordPress.org or this server’s configuration
- What are the common security flaws I need to look for? [closed]
- Can I upgrade a plugin to a specific version?
- Contact form 7 select box different value-text than content-text in option [closed]
- Disabled plugins are they security holes – rumor or reality?
- How to implement WordPress plugin update that modifies the database?
- How to create custom message on plugin update
- What could a hacker do with my wp-config.php
- What are the best practices for updating?
- How Can I Securely Implement a Password-less Login Feature?
- Update plugin from personal API
- Security and .htaccess
- Are there procedures to prevent malicious plugin updates?
- Can’t install new plugins because of the error “Could not create directory”
- Removing the “Your backup folder MIGHT be visible to the public” Message Generated by the WP-DBManager Plugin
- How to create a WordPress plugin for another wordpress plugin?
- Managing WP Core & Plugin Updates for Clients
- Error when updating plugins by FTP “Unable to locate WordPress Content directory (wp-content).”
- Preventing a plugin from updating
- How to get current post ID in Contact Form 7 wpcf7_before_send_mail hook action
- To Disable WordPress Rest API or Not To Disable?
- Secure WordPress paid plugin
- Plugin update error message
- Customize plugin update “new version is available” text
- How to make media upload private? [duplicate]
- Does WordPress contain “default” anti-SQL injection code that responds with a 404 error?
- Get Latest Plugin Version from WP API
- Which files get updated in a plugin update?
- What does a security risk in a plugin look like?
- How wordpress detects a plugin update
- A Way to Auto update plugins using cron?
- WordPress Capabilities: edit_user vs edit_users
- Overwrite textdomain of plugins by default – Lost Translation
- Plugin updates are not shown
- Should we use plugins that aren’t available from the official WordPress site?
- How to check plugins for malicious code?
- How to properly secure my WordPress installation?
- Filter Hook on plugin update
- Updating WordPress – the best approach (updating wp core, plugins and db)
- Remove update messages for deactivated plugins
- How get list of updates of wp site?
- plugin wants to update to wrong plugin
- How to update WordPress plugin readme.txt description page without triggering a plugin update?
- Why allow overriding crucial pluggable functions wp_verify_nonce and wp_create_nonce?
- Where should my plugin POST to?
- How to notify users of blog updates a la Admin Plugin Update notifications?
- WordPress error – PHP Fatal error: Uncaught Error: Call to undefined function register_block_type_from_metadata()
- Security error WP 4.0 + WP phpBB Bridge [closed]
- How can a plugin run a script after being updated in MultiSite?
- Should I install plugins to my WordPress installation from web sites having in URL “nulled” or, “null”?
- Automatic updates not working/plugins not installing
- How to update plugin without overwrite custom code
- Disabled plugins are security holes – rumor or reality?
- Hook (upgrader_process_complete) running moment
- What Triggers a Plugin Update Alert
- WordPress plugin search does not work and updates are not shown, VPS install
- Why am I sometimes getting a 404 error when I try to update a page with Elementor?
- Should I use RIPS tool to test my themes and plugins?
- How do I prevent Plugin updates from clobbering user edits?
- Contact Form 7 plugin refreshing page on submit [closed]
- Force wordpress to request for FTP Info on theme/plugin install/update
- Prevent Brute Force Attack
- Under which circumstances is the .maintenance file not deleted?
- How to disable autocomplete for inputs in contact form 7? [closed]
- How many security plugins are too many? [closed]
- Will WordPress username displayed somewhere in the site?
- Plugin child folder?
- Plugins won’t update when WordPress says they’re updated
- Is revealing just the AUTH_KEY a security issue?
- How Restrict access to admin dashboard by specific static ip?
- How to check if WordPress is updating plugins?
- All Updated Plugins Disappeared
- When is it useful to use wp_verify_nonce
- Do extra plugin files get deleted during an upgrade?
- Protecting against malicious code in WordPress plugin updates
- Override plugin functions in functions.php
- Questions about brute force attacks on the admin username, coming from amazon IP addresses
- Skip file when plugin updated
- Could not create directory
- Why Better WP security plugin returns 418 I’m a Teapot “error”?
- How to expire all wordpress user passwords instantly?
- Server side validation for Contact Form 7 [closed]
- How to migrate from Mark Jaquith’s Subscribe to Comments plugin to Gurken’s new version?
- Can I check plugins and themes for PHP 5.6 ahead of global PHP server Update
- Can’t use the built-in wordpress install/upgrade plugin feature [closed]