Fluent Forms < 6.2.6 - Custom+ Sensitive Data Exposure and Modification

Description

The plugin is vulnerable to authorization bypass due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Custom-level access and above, to read private form submissions, change submission statuses, permanently delete submissions, and modify global plugin settings.