Input validation vulnerability in Contact Form by Supsystic 1.7.27

The Contact Form by Supsystic plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This vulnerability affects versions of the plugin up to and including version 1.7.27. The problem is that the plugin does not have any security measures in place to validate certain requests. This means that a malicious user could create a forged request and trick an administrator into performing an action, such as clicking on a link, without their knowledge.