The kamleshyadav WP Lead Capturing Pages plugin before version 2.6 contains a Missing Authorization vulnerability due to misconfigured access control. This flaw allows unauthenticated attackers to affect the availability of the plugin or underlying system remotely without any user interaction. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to availability. No patch or official fix information is available at this time.

The vulnerability can lead to a denial of service or other availability impacts on systems running vulnerable versions of the WP Lead Capturing Pages plugin. There is no reported confidentiality or integrity impact. Exploitation does not require authentication or user interaction, increasing the risk of remote attacks. However, no known exploits have been observed in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, users should monitor vendor communications for updates. Until a fix is available, restricting access to the plugin's functionalities or disabling the plugin if feasible may reduce exposure.