Critical Vulnerability in WordPress Forminator Forms Plugin Allows Code Injection

The WordPress plugin Forminator Forms contains a critical vulnerability that allows arbitrary code injection (codesmuggling). The flaw affects unspecified versions of the plugin, though no CVE ID or exact technical details were provided in the report. Additionally, the Royal Elementor Addons plugin is mentioned as having security weaknesses, though no specific impacts or attack vectors are described. The article does not specify a disclosure date or patch availability for either vulnerability. The primary risk outlined is the potential for attackers to execute malicious code on affected WordPress sites. No further technical or mitigation details are included.