Input validation vulnerability in Visual Form Builder 2.8.3

The Visual Form Builder plugin for WordPress is vulnerable to a type of cyber attack known as Cross-Site Request Forgery in versions up to and including 2.8.2. This vulnerability arises from missing or incorrect security checks on the current_filter_action function. This means that an unauthenticated attacker can add additional SQL queries to existing queries in order to extract sensitive data from the database if they can trick a site administrator to click on a link.