Unauthenticated Subscriber Email Addresses Disclosure vulnerability discovered by Felipe de Avila in WordPress Popup by Supsystic plugin (versions <= 1.10.8).
Update the WordPress Popup by Supsystic plugin to the latest available version (at least 1.10.9).