~1 year ago there was a zero-click (rce I think?) for easy smtp. At the time it was the most popular plugin for smtp setup on Wordpress, I can't imagine how many sites have that plugin installed without updates.