This vulnerability in the Popup Surveys & Polls for WordPress plugin arises from missing authorization checks, enabling attackers with at least low privileges to exploit incorrectly configured access control. The affected versions include all up to 1.36. The CVSS vector indicates network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. No patch or official remediation guidance has been provided yet.

An attacker with some level of privileges could exploit this missing authorization to perform actions that should be restricted, potentially leading to integrity and availability impacts on the affected WordPress site. There is no confidentiality impact reported. The vulnerability does not appear to be actively exploited in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations for the Popup Surveys & Polls plugin. Limit user privileges to the minimum necessary to reduce risk.