This vulnerability in Contact Form by WPForms (wpforms-lite) arises from missing authorization controls, allowing users with limited privileges to perform actions beyond their intended access. It affects all versions up to and including 1.9.2.2. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to integrity loss without confidentiality or availability impact. No vendor advisory or patch information is available at this time.

The vulnerability could allow an attacker with low privileges to perform unauthorized actions that affect the integrity of the affected system or data. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges to minimize potential exploitation. Monitor vendor channels for updates and apply patches promptly once available.