Input validation vulnerability in Database for Contact Form 7, WPforms, Elementor forms 1.3.3

The contact form plugin for WordPress, called “Database for Contact Form 7, WPforms, and Elementor forms,” has a security issue that allows attackers to insert harmful code into webpages. This can happen when someone uses the plugin’s special codes in versions 1.3.3 and earlier. The problem is that the plugin doesn’t properly check the information it gets from users, so attackers with certain permissions can put their own code on any page that uses the plugin.