Access violation vulnerability in Lead Form Data Collection to CRM 3.1

A plugin for WordPress called Lead Form Data Collection to CRM has a security flaw that could allow hackers to change data without permission. This could lead to them gaining higher privileges on the website, which means they could access sensitive information or make changes to the site. The flaw affects all versions up to 3.1 and can be used by attackers who have at least Subscriber-level access. They could change settings and even make themselves an administrator, giving them full control over the website. Other actions within the plugin are also not well protected, making it easier for hackers to exploit the vulnerability.