WordPress plugin Metform information leakage vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin Metform is vulnerable to an information disclosure vulnerability, which stems from improper access control of the ~/core/forms/action.php file, and an unauthenticated attacker can use the vulnerability to view all API keys and integrate with third-party APIs secret PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA, etc.