The Mail On Update WordPress plugin was affected by an Email Option Manipulation CSRF security vulnerability.
CSRF
No
2014-08-01 (about 8 years ago)
2019-11-27 (about 3 years ago)