Description
This secure (https) page contains a form that is posting to an insecure (http) page. This could confuse users who may think their data is encrypted when in fact it's not.
Remediation
The form target should point to a secure (https) page.
References
Related Vulnerabilities
WordPress Plugin A2 Optimized WP Information Disclosure (2.0.10.8)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5730)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6514)
WordPress Plugin Video Conferencing with Zoom Information Disclosure (3.8.16)