This vulnerability in the Contact Form 7 AWeber Extension by Renzo Johnson arises from missing authorization checks, leading to incorrect access control. It affects versions up to 0.1.40 and could allow attackers to perform actions without proper permissions. The CVSS 3.1 base score is 5.3, with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and impact limited to availability loss. No vendor advisory or patch information is available, and no known exploits have been reported.

The vulnerability impacts availability by allowing unauthorized actions that could disrupt service or functionality of the Contact Form 7 AWeber Extension. There is no impact on confidentiality or integrity according to the CVSS vector. Since no known exploits are reported, the immediate risk appears limited but medium severity suggests caution.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected extension and monitor for updates from Renzo Johnson or the extension's maintainers. No specific vendor mitigation instructions are currently provided.