WP-CRM System <= 3.2.9.1 is vulnerable to Broken Access Control vulnerability

The WordPress CRM Plugin – WP-CRM System plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.2.9.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.