The Insurify WordPress plugin, versions up through 1.0, implements an AJAX action named 'saveemailtemplatedesign' without proper authorization or nonce validation, and missing authorization checks (CWE-862). This flaw allows anyone to submit crafted POST requests containing arbitrary option names and values, resulting in the creation or overwriting of WordPress options. The ability to alter core WordPress options can disable critical plugin logic or change site configuration, potentially rendering the entire site inoperable or taking it offline.

Any WordPress installation that has the Insurify plugin installed at version 1.0 or earlier is affected, regardless of other plugins, theme choices, or server settings. The vulnerability is independent of user roles or authentication status, so the attack surface includes every publicly accessible instance of the site.

The most likely attack vector is a network-accessible POST request to /wp-admin/admin-ajax.php with the action parameter set to 'saveemailtemplatedesign' and arbitrary option payloads. Because no authentication is required, any actor with network access could exploit the flaw. The vulnerability's CVSS score of 9.1 indicates a critical severity focused on availability, yet its EPSS score of less than 1% suggests that exploitation is currently rare. It is not listed in the CISA KEV catalog, but its high severity and the simplicity of the exploit make it a high‑priority concern for any site operator.