The WordPress plugin has several vulnerabilities that can hijack your site when executing code.

https://threatpost.com/newsletter-wordpress-plugin-site-takeover/158025/