This vulnerability is a Missing Authorization flaw that allows an attacker to manipulate or gain access to the plugin’s data handling features. As a result, attackers could read or modify entries made through Contact Form 7, WPForms, Elementor, Formidable or Ninja Forms, potentially exposing sensitive user information or altering form behaviour. The weakness is catalogued as CWE‑862 and is rated Moderate on the CVSS scale.

The flaw affects the CRM Perks WP Insightly plugin for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms. Any installation using version 1.1.5 or earlier is at risk. Upgrading to a newer release mitigates the issue.

The CVSS score of 6.5 indicates moderate severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is web‑based, as the flaw can be triggered by any user who can interact with the affected forms on the site. Exploiting correct configuration of access control levels is possible without administrative privileges, making the risk more significant for sites with permissive user roles.