This vulnerability (CVE-2024-35174) in Flothemes Flo Forms is classified as CWE-862 (Missing Authorization). It affects Flo Forms versions up to 1.0.42 and allows unauthorized access to functionality that should be protected by authorization controls. The CVSS 3.1 base score is 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or official remediation has been disclosed by the vendor.

The impact of this vulnerability is limited to integrity, meaning unauthorized users could potentially perform unauthorized actions or modifications within the Flo Forms plugin. There is no confidentiality or availability impact reported. No known exploitation in the wild has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround has been published, users should monitor vendor channels for updates. Until a patch is available, consider restricting access to the affected plugin or limiting exposure to untrusted users where possible.