Description
This form is served from an insecure page (http) page. This page could be hijacked using a Man-in-the-middle attack and an attacker can replace the form target.
Remediation
The form should be served from a secure (https) page.
References
Related Vulnerabilities
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3128)
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10334)
WordPress Plugin AlertWire Information Disclosure (1.1.1)
WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.12)
WordPress Plugin Advanced Custom Fields PRO Information Disclosure (6.0.2)