This vulnerability involves missing authorization checks in the CRM Perks WP Insightly plugin for several popular WordPress form builders. It affects versions up to 1.1.5 and allows attackers with low privileges to access data without proper permission validation. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No patch or vendor advisory is currently available, and no exploits have been observed in the wild.

An attacker with low privileges can exploit the missing authorization to access sensitive information managed by the WP Insightly plugin, potentially leading to unauthorized data disclosure. There is no indication of impact on data integrity or availability. The vulnerability affects confidentiality but does not appear to allow privilege escalation or system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict access to the affected plugin features to trusted users only and monitor for suspicious activity. Avoid exposing the plugin's functionality to untrusted users. Apply official patches promptly once they become available.