Code Execution Vulnerability

Hello, working on your plugins i found this plugin to be vulnerable to Code Execution:
(Userinput is used as dynamic function name. Arbitrary functions may be called.)

An attacker might execute arbitrary PHP code with this vulnerability. User tainted data is embedded into a function that compiles PHP code on the run and executes it thus allowing an attacker to inject own PHP code that will be executed. This vulnerability can lead to full server compromise.

Code:

$page = str_replace(SB_WE_PLUGIN_DIRNAME, ”, trim($_REQUEST[‘page’]));
echo $sb_we_admin_start;
echo $page();

OWASP
Best Regards
https://ww.wp.xz.cn/plugins/welcome-email-editor/