The Forminator Forms plugin for WordPress up to and including version 1.53.0 has a missing authorization vulnerability. An authenticated user with subscriber-level access can configure scheduled export jobs without proper permission checks, allowing them to exfiltrate sensitive form submission data by sending it to an attacker-controlled email address.