WordPress Form Maker plugin versions 5.4.1 and below suffer from a remote SQL injection vulnerability.