Forminator < 1.52.1 - Unauthenticated Missing Authorization to Payment Bypass

Description

The plugin is vulnerable to authorization bypass due to insufficient verification of user authorization when processing attacker-supplied Stripe PaymentIntent identifiers in the public payment flow. This makes it possible for unauthenticated attackers to submit high-value paid forms as completed by reusing a previously succeeded low-value Stripe PaymentIntent, resulting in underpayment/payment bypass conditions.