This vulnerability in moshensky CF7 Spreadsheets (<= 2.3.2) arises from missing authorization checks, which means that access control is improperly configured. This can allow an attacker with at least low privileges to perform actions that should be restricted, potentially affecting data integrity and availability. The CVSS 3.1 base score is 5.4, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, but low integrity and availability impacts.

The vulnerability allows unauthorized actions due to missing authorization, which can lead to modification or disruption of spreadsheet data handled by the plugin. There is no impact on confidentiality. The overall impact is medium severity with potential integrity and availability consequences. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to the plugin to trusted users only and review access control configurations to minimize risk.