https://blog.wpsec.com/wordpress-phpmailer-vulnerability-analysis/
WordPress PHPMailer vulnerability analysis