The Form Maker plugin for WordPress, created by 10Web, has a security issue that can allow attackers to inject harmful code into certain pages. This can only happen on websites with multiple installations and on websites where a certain security feature is turned off.