The Forminator plugin for WordPress, which allows users to create contact forms, payment forms, and custom forms, has a security vulnerability. This can allow attackers with certain permissions to insert harmful code into pages, which will run when a user visits that page.