The vulnerability identified as CVE-2025-22686 affects the WesternDeal CF7 Google Sheets Connector plugin, specifically versions up to 5.0.17. It is classified as a Missing Authorization issue, where the plugin fails to enforce proper access control, allowing unauthorized users to perform actions that should be restricted. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity. There is no vendor advisory or patch link provided, and no known exploits have been observed.

The vulnerability could allow unauthorized users to perform actions that modify data or configurations within the affected plugin, potentially leading to integrity issues. There is no indication of confidentiality or availability impact. The medium severity score reflects a moderate risk that unauthorized changes could be made without proper authorization.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin and its functionalities to trusted users only. Monitor for vendor updates regarding patches or official mitigations.