russellr vulnerabilities and threats

The Tectite Forms plugin for WordPress is vulnerable to a Cross-Site Request Forgery (CSRF) attack in all versions up to and including 1.3. This vulnerability arises from missing or incorrect nonce validation in the admin_init function, allowing unauthenticated attackers to modify plugin settings by tricking an administrator into performing an action such as clicking a malicious link. The vulnerability has a CVSS score of 4.3, indicating medium severity.