Input validation vulnerability in WPFrom Email 1.8.8

The WPFrom Email plugin for WordPress has a security vulnerability that could let bad actors with administrative-level permissions insert malicious code into webpages. This code could run whenever someone visits the affected page. This vulnerability affects multi-site installations and installations where certain security settings have been disabled. The vulnerable versions of the plugin are up to and including 1.8.8.