Subscribe2 – Form, Email Subscribers & Newsletters < 10.41 - Sending Emails via CSRF

The plugin does not implement nonce checks, which could allow attackers to make a logged-in admin send test emails with arbitrary content to users.