CVE-2025-67570 describes a missing authorization vulnerability in the WesternDeal WPForms Google Sheet Connector plugin (versions up to 4.0.0). This vulnerability arises from incorrectly configured access control, allowing unauthorized users to perform actions that should require authorization. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthorized modification of data due to missing authorization checks in the affected plugin. This could lead to integrity issues within the Google Sheet data connected via the plugin. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the plugin and its functionalities to trusted users only and monitor for updates from WesternDeal. No official fix or temporary workaround has been published at this time.