Input validation vulnerability in Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder 6.7

The Formidable Forms plugin for WordPress contains a security vulnerability which allows attackers with administrator-level access to inject malicious code into pages. This code will be executed whenever anyone visits the affected page. By default, the vulnerability only affects multi-site installations and installations with disabled unfiltered_html. Other user types can also exploit the vulnerability if they have been granted the necessary permissions in the Formidable settings. The vulnerability affects all versions up to 6.7.