The vulnerability identified as CVE-2024-44019 affects the Contact Form 7 Campaign Monitor Extension by Renzo Johnson. It is characterized by missing authorization controls, which means that the extension does not properly verify whether a user is authorized to perform certain operations. This issue impacts all versions up to and including 0.4.67. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity loss without confidentiality or availability impact. No patch or official fix has been referenced in the available data.

The vulnerability allows unauthorized users to perform actions that should require authorization, potentially leading to unauthorized modification of data or settings within the Contact Form 7 Campaign Monitor Extension. The impact is limited to integrity loss; confidentiality and availability are not affected. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected extension or disabling it if feasible. Monitor vendor communications for updates regarding patches or official mitigations.