The kamleshyadav CF7 7 Mailchimp Add-on contains a Missing Authorization vulnerability (CVE-2025-29012) in versions before 2.4. This issue arises from improperly configured access control, allowing unauthorized users to perform actions that could modify data or system state without proper permissions. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.3, reflecting network attack vector, low attack complexity, no privileges required, and no user interaction needed. There is no indication of confidentiality or availability impact.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions that affect the integrity of the affected system or data. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor for updates from the vendor or maintainers of the CF7 7 Mailchimp Add-on and apply any released patches promptly. Until a fix is available, restricting access to the affected add-on and minimizing exposure may reduce risk.