An issue exists in the MailPoet Newsletters (aka wysija-newsletters) plugin prior to 2.8.2 for WordPress. The plugin is vulnerable to SPAM attacks.
mailpoet mailpoet newsletters