Input validation vulnerability in Newsletters 4.10

The plugin called Newsletters for WordPress has a security issue called Cross-Site Request Forgery. This affects all versions up to 4.10. The problem is that the plugin does not properly check for a security code before performing a function. This can allow someone who is not logged in to the site to perform a harmful action, as long as they trick the site administrator into clicking on a link.