CVE-2024-1130 affects the NEX-Forms WordPress plugin, allowing unauthorized access and modification of form records. Specifically, a missing capability check in the set_read() function exposes the plugin to exploitation. This vulnerability, present in versions up to 8.5.6, enables authenticated attackers with subscriber-level access or higher to mark records as read without proper authorization. The SVRS score of 30 indicates a low level of risk, suggesting that immediate action may not be required, but monitoring is advisable. The vulnerability allows unauthorized modification of data, but the low SVRS suggests it is not actively exploited or linked to critical threat actors. While the CVSS score is 4.3 (Medium), the SVRS provides a more dynamic and context-aware risk assessment. Organizations using the NEX-Forms plugin should consider updating to a patched version to mitigate this vulnerability.