The vulnerability identified as CVE-2025-64384 in jetmonsters JetFormBuilder involves missing authorization checks, which means that the plugin does not properly enforce access control for certain operations. This incorrect configuration can be exploited remotely without privileges or user interaction, potentially causing availability impact. The affected versions include all releases up to and including 3.5.3. There is no indication of confidentiality or integrity impact. No patch or vendor advisory is currently provided, and the product is not a cloud service.

The impact is limited to availability, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Exploitation could lead to denial of service or disruption of the JetFormBuilder functionality. There is no evidence of data confidentiality or integrity compromise. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or advisory is available, users should monitor vendor communications for updates. Until a fix is released, consider restricting access to the affected plugin or disabling it if feasible to reduce exposure.