Input validation vulnerability in EnvíaloSimple: Email Marketing y Newsletters 2.1

The EnvíaloSimple: Email Marketing and Newsletters plugin for WordPress is vulnerable to a type of cyber attack called a PHP Object Injection. All versions of the plugin up to and including version 2.1 are affected. This type of attack makes it possible for unauthenticated attackers to inject a malicious code into the vulnerable plugin. This code could allow the attacker to delete files, steal data, or run malicious code on the target system. If another plugin or theme is installed on the target system, it could also give the attacker the ability to exploit more vulnerabilities.