EPSS
Percentile
25.9%
The plugin is vulnerable to CSRF which allows changed plugin settings and can be used for sending spam emails.