A popular plugin called “Forminator Forms” on WordPress has a security vulnerability that allows unauthorized individuals to create draft quizzes by tricking site administrators into clicking on a link. This vulnerability exists in all versions up to 1.35.1 and is caused by missing or incorrect security checks.