The MySQL server on my VPS crashed the other day, and checking in my wp_options table I found over 1000 wp_session entries like this:
Thinking these were being created by the new feature: 'Meeting Scheduler - by vCita'; (being as I don't have this feature enabled anyway) I deleted this folder from the si-contact-form plugin folder.
I then manually deleted all these wp_sessions from my database, but noticed that this wp-session still keeps getting added to my database:
Then the wp-sessions like this keep getting added:
Starting to suspect a hack, because WordPress should not normally retain sessions (Register_Globals is off on my server).
Disabled Fast Secure Contact Form plugin on our duplicate test site, and the added wp_sessions stopped.
This has only started with the latest updates of FS contact form. (Wasn't happening with version 22.214.171.124.)
Anybody else getting this?