FormCraft < 1.2.11 - Missing Authorization

Description

The FormCraft plugin for WordPress is vulnerable to unauthorized access of data due to missing capability checks on the 'formcraft_basic_check' and 'formcraft_basic_check_form_page_access' functions in versions up to, and including, 1.2.10. This makes it possible for authenticated attackers, with subscriber-level access and above, to export and preview forms.