It occurs when you redirect from one page to other, even when on same domain. To suppress, open /includes/email.php and comment out:
if ( $wp_get_referer )
wp_die( __( ‘Security check: referal does not match this site.’ , ‘visual-form-builder-pro’), ”, array( ‘back_link’ => true ) );
