WordPress Email Subscribers and Newsletters plugin version 4.2.2 suffers from a remote SQL injection vulnerability.
3b1ba7f2adb21ee070c2bf0cfebba2aaf20bdd0f36a4c6f0376d19e944a016f5
WordPress Email Subscribers and Newsletters plugin versions 4.2.2 and below suffer from a file download vulnerability.
d1c23fbb1b3faddef428fea1307402891ddd22e3ff691d112340c329d3756149