This vulnerability in WP-CRM System (<= 3.4.6) arises from missing authorization checks, leading to incorrect access control enforcement. An unauthenticated attacker can exploit this flaw to perform unauthorized actions that may alter data integrity. The CVSS score is 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, and no user interaction needed. There is no indication of confidentiality or availability impact.

The vulnerability impacts the integrity of the WP-CRM System by allowing unauthorized modification or manipulation of data due to missing authorization controls. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restrict access to the affected WP-CRM System installations and review access control configurations to minimize exposure.