Access violation vulnerability in Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free 3.4

The Funnelforms Free plugin for WordPress has a security issue in versions up to and including 3.4. This issue means that an attacker with subscriber-level permissions and above can modify certain parts of a post. The extent of the modification is limited, as certain values are fixed when they are passed into the wp_update_post function.