This vulnerability in Contact Form by WPForms (<=1.10.0.4) is an unauthenticated broken access control issue (CWE-862). It allows attackers without any privileges to bypass authorization controls, potentially leading to unauthorized actions that impact the integrity of the system. The CVSS 3.1 score is 7.5 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No official patch or remediation guidance is currently available from the vendor or advisory sources.

The vulnerability allows unauthenticated attackers to bypass authorization controls, leading to a high impact on integrity. This could enable attackers to manipulate or alter data or functionality that should be protected. There is no confidentiality or availability impact reported. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are documented in the provided data.