Input validation vulnerability in Forminator Forms – Contact Form, Payment Form & Custom Form Builder 1.42.0

The plugin called Forminator Forms, which is used for creating contact forms, payment forms, and custom forms on WordPress, has a security issue that affects all versions up to 1.42.0. This issue, known as Order Replay, allows attackers to use the same payment information for multiple transactions without being authenticated. The plugin does not properly check the validity of a key controlled by the user, making it possible for attackers to trick administrators into fulfilling each transaction.