Input validation vulnerability in Forminator – Contact Form, Payment Form & Custom Form Builder 1.26.0

The Forminator plugin for WordPress is vulnerable to a malicious attack that can allow an attacker with administrator-level permissions to insert malicious code into pages on the website. This malicious code can be executed when a user visits the website and can only affect websites with multiple sites or those that have prevented certain types of HTML from being used. This vulnerability affects all versions up to and including 1.26.0.