The vulnerability identified as CVE-2026-32487 affects the raratheme Lawyer Landing Page plugin up to version 1.2.7. It is due to missing authorization controls, which means that access control mechanisms are improperly configured, potentially allowing unauthorized users to perform actions that should require permissions. The CVSS 3.1 base score is 5.3 (medium), with the vector indicating network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact. No patch or vendor advisory is currently available, and no exploits in the wild have been reported.

The vulnerability allows unauthorized users to perform actions that should be restricted, impacting the integrity of the affected system. There is no impact on confidentiality or availability. Since no known exploits are reported, the immediate risk may be limited, but the potential for unauthorized modification exists.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in the Lawyer Landing Page plugin to ensure proper authorization checks are enforced. Monitor for vendor updates or patches addressing this issue.