Thanks for reporting, this was caused to due to phplist vulnerability, have fixed now.