This vulnerability in Automattic Crowdsignal Forms arises from missing authorization checks caused by misconfigured access control security levels. It affects versions up to and including 1.7.2. The CVSS 3.1 base score is 3.8, indicating a low severity issue with network attack vector, low attack complexity, requiring high privileges, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. No patch or vendor advisory details are available to confirm remediation status.

The vulnerability could allow an attacker with high privileges to bypass certain authorization controls, leading to limited integrity and availability impacts within the affected Crowdsignal Forms installations. There is no confidentiality impact, and exploitation requires high privileges. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations for Crowdsignal Forms to ensure proper authorization enforcement. Monitor for vendor updates regarding patches or official mitigations.