This vulnerability in Ays Pro Poll Maker (<= 5.5.6) arises from missing authorization checks, which means that certain actions can be performed without proper access control validation. The CVSS vector indicates that the vulnerability is remotely exploitable over the network without privileges or user interaction, and it impacts integrity and availability but not confidentiality. No patch or official fix information is provided, and the vendor has not released an advisory or remediation guidance as of the published date.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions that may alter data or disrupt service availability in the Poll Maker application. Confidentiality is not impacted. Since no known exploits are reported, the immediate risk may be limited, but the medium severity score reflects a meaningful risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Poll Maker application to trusted users only and monitor for unusual activity related to access control bypass attempts.