The flaw could have let attackers send out custom newsletters and delete newsletter subscribers from 200,000 affected websites.
Source: Threadpost