PHPMailer is not part of the plugin, it is shipped with WordPress. So it is up to WordPress to keep it up to date. There is a patch already in ticket #37210.
In the mean time, you can create a mu-plugin, include the newer version of PHPMailer here, create an instance and assign it to the global variable $phpmailer. WordPress will then use that instead of its own outdated version. But be aware that WordPress’ version has some changes that are not compatible with the original class, so you might break some plugins.
Related Posts:
- Why users disable the WordPress update?
- Upgrading WordPress 4.0 asks for FTP password
- How can we deal with unmaintained plugins with vulnerabilities?
- Malware installation during plugin update?
- Vulnerability Concern From the Plugin or From Not Updating the Plugin?
- How can I disable new plugin and theme install, but allow updates?
- to perform the requested action wordpress needs to access your web server. please enter your ftp
- I found this in a plugin. What does it do? is it dangerous?
- Disabled plugins are they security holes – rumor or reality?
- How to implement WordPress plugin update that modifies the database?
- What could a hacker do with my wp-config.php
- What are the best practices for updating?
- Removing the “Your backup folder MIGHT be visible to the public” Message Generated by the WP-DBManager Plugin
- Error when updating plugins by FTP “Unable to locate WordPress Content directory (wp-content).”
- To Disable WordPress Rest API or Not To Disable?
- How get list of updates of wp site?
- plugin wants to update to wrong plugin
- Should I install plugins to my WordPress installation from web sites having in URL “nulled” or, “null”?
- Automatic updates not working/plugins not installing
- Disabled plugins are security holes – rumor or reality?
- What Triggers a Plugin Update Alert
- Should I use RIPS tool to test my themes and plugins?
- How to disable autocomplete for inputs in contact form 7? [closed]
- How many security plugins are too many? [closed]
- How Restrict access to admin dashboard by specific static ip?
- When is it useful to use wp_verify_nonce
- Do extra plugin files get deleted during an upgrade?
- Protecting against malicious code in WordPress plugin updates
- Security issues with WP sites
- Escape when echoed
- Function to see how many plugins on a site need updating
- Why wp_mail() function isn’t sending any emails and displaying ‘0’ in Chrome ‘Network’ response
- get values from contact form 7 wp plugin [closed]
- Where to access the available plugin/WordPress updates?
- Can’t send mails using contact plugin [closed]
- How can I make uploaded images in the editor load with HTTPS?
- Download any file after submitting a form [closed]
- Force Plugin Updates: “Update Failed: Plugin update failed.” after update one plugin
- Can’t update/install plugins or WordPress
- The safest way to automate WordPress backups
- Does WordPress validate inputs to all functions? (such as get_user_meta and insert_user_meta)
- What keys are needed when passing the icons array to plugins_api()?
- Nextcloud integration with wordpress
- Send Contact form 7 data to remote server using .NET api [closed]
- `plugins_api()`: why does a commercial plugin changelog link result in a tailing plugins repo check and 500 error? [closed]
- Why can’t I access my Intranet LDAPS with NADI?
- how to create progress bar in wordpress contact form 7 or other plugin for set progress bar in cf7 [closed]
- After upgrade to php 7 plugin/them updates broke [closed]
- How to test ‘upgrader_process_complete’ hook in plugin development?
- Hack-Proof OR Security in WordPress — is it real?
- Redirect to another page using contact form 7? [closed]
- Batch update of WordPress Plugins
- Is Timthumb still broken? What security measures should be taken?
- How to get plugin name from plugin file location
- Prevent direct access to WordPress plugin assets?
- What is a rock solid development and deployment workflow? [closed]
- Specific way to allow WordPress users to view their current password? And edit it?
- Is there any pre-existing plugin to track and block IPs with suspicious activity on my site?
- How to prevent plugins from sniffing/stealing other plugins’ options?
- How to deal with Slow HTTP POST (slowloris) vulnerability
- Running multiple security plugins
- how do I secure my WP website from hackers? [closed]
- How to modify or create custom contact form 7 select options [closed]
- Regularity of Checking for plugin updates? [duplicate]
- How to add update function to plugin without adding it to https://wordpress.org/plugins/ [closed]
- How (or where) do I get wordpress plugin update download link?
- Problem after updating plugins
- Hardcode a form in Contact Form 7 [closed]
- If I use an alternative login (e.g. CAS or other SSO) plugin, is my site protected from the recent brute force login attempts?
- WP Insert Post If user refreshes override new post
- WordPress search shows protected content
- Manualy Updated WordPress Error
- Content-Security-Policy implementation with WordPress W3Total Cache plugin installed
- Plugin updated pushed with git break site
- There has been a critical error on your website
- “Fire Secure” menu item
- WordPress Contact 7 Form – Remove WordPress from the From Sections
- Installation failed, trying to install ANY plugin
- Multiple CF7 Forms causing multiple recaptcha requests
- https rewrite not working for All in one security Brute force > rename login url
- Capture Recaptcha fail event on Contact Form 7
- Making sure updates didn’t break anything
- Can Hosting affect a plugin from working properly?
- Pause form submissions while upgrading plugins
- WordPress Plugin Install / Update Problem
- User content database [closed]
- Update page (update-core.php) & Plugins page (plugins.php) revert to homepage
- using .htaccess only for wordpress security no plugins
- Which part of the plugin to change so the updater won’t register the next version?
- Updates for a private plugin?
- Trouble After Update, Removing Plugin
- Using one-click plugin upgrade feature securely on suexec server
- Contact Form 7 Default value from url [closed]
- Integrate Razorpay quick payments plugin with contact form7 plugin
- How I can hide my wp folders from Inspect Element (Developer Tools)
- How to Find WordPress site has backdoor login Codes
- How to delete Password Protected posts cookies when a user logged out from the site
- how to update wordpress plugin programmatically using plugin path
- WordPress User Registration/ Sign Up -> Able to take Paid Certification Courses & keep track of Completed Certificates
- Block Root REST API Route using custom &/or iThemes