The Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms plugin for WordPress has a security vulnerability in versions up to, and including, 2.6.9. Attackers can use this vulnerability to inject malicious web scripts into webpages. This means that when a user visits one of these webpages, the malicious web scripts will be executed.