Access violation vulnerability in Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free 3.7.3.2

The Funnelforms Free plugin for WordPress, which allows users to create interactive contact forms and multi-step forms, is at risk of having its data changed without permission. This is because a key security check was not included in the ‘fnsf_af2_handel_file_upload’ function, leaving all versions up to 3.7.3.2 vulnerable. This could potentially allow hackers to upload any type of media to the website, even if there are no forms present.