Input validation vulnerability in Metform Elementor Contact Form Builder 3.8.1

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to a security issue known as Cross-Site Request Forgery. This vulnerability affects all versions of the plugin up to and including version 3.8.1. The problem is caused by a lack of security measures which should prevent someone from making a forged request to the plugin. If a site administrator clicks on a link provided by an attacker, it can allow the attacker to connect their own Hubspot account to the victim’s metform, allowing them to access leads and contacts. To protect against this security issue, it is important to update the plugin to the latest version.