Access violation vulnerability in Metform Elementor Contact Form Builder 3.3.1

The Metform Elementor Contact Form Builder for WordPress is a tool used to create contact forms for websites. A security vulnerability has been discovered in versions up to, and including, 3.3.1. This vulnerability allows attackers, who have subscriber-level capabilities or higher, to access sensitive information about form submissions, such as the submitter’s first name. This vulnerability is related to the ‘mf_first_name’ shortcode.