Input validation vulnerability in WP-EMail 2.67.2

The WP-Email Plugin for WordPress is vulnerable to an attack called SQL Injection. This attack can be used to gain access to sensitive information in the database. It affects versions of the plugin before 2.67.2. Attackers can use the ‘last_emailed’ parameter, which has not been escaped properly, to add additional SQL queries to the existing ones and gain access. It is important to make sure that you are running the latest version of the WP-Email Plugin to avoid this vulnerability.