Email Address Disclosure vulnerability discovered by Krzysztof Zając in WordPress Better Notifications for WP plugin (versions <= 1.8.6).
Update the WordPress Better Notifications for WP plugin to the latest available version (at least 1.8.7).