forfront e-shot

• CVE-2026-3642 Medium 5.3 e-shot <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Form Settings Modification via AJAX 0.4%
• CVE-2026-3546 Medium 5.3 e-shot <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via API Token via 'eshot_form_builder_get_account_data' AJAX Action 0.2%