This vulnerability is a CSRF issue in the ZealousWeb User Registration Using Contact Form 7 plugin, which allows attackers to trick authenticated users into submitting unintended requests. The affected versions include all versions up to 2.4. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity and availability with no confidentiality impact. There is no information about an available patch or official fix from the vendor.

The vulnerability can lead to unauthorized actions being performed on behalf of an authenticated user, potentially altering data or causing denial of service conditions. Confidential information is not impacted. Since no known exploits are reported, the immediate risk may be limited but the medium severity score reflects the potential for misuse if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying CSRF tokens in requests or disabling the affected plugin if feasible. Monitor official ZealousWeb channels for updates.