This vulnerability in the GetResponse Email marketing plugin for WordPress arises from missing authorization checks, allowing users with limited privileges to perform actions that should require higher access rights. The issue affects all versions up to 1.5.3. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported.

Exploitation of this vulnerability could allow an attacker with low privileges to modify data or perform unauthorized actions within the plugin, potentially compromising the integrity of the email marketing system. There is no indication of confidentiality or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin's administrative functions to trusted users only and monitor for unusual activity related to the plugin.