The vulnerability identified as CVE-2025-29000 affects the Multi-language Responsive Contact Form plugin by August Infotech, specifically versions up to 2.8. It is caused by missing authorization checks, which allow unauthenticated remote attackers to access functionality that should be protected by ACLs. The CVSS 3.1 vector indicates the attack can be performed over the network without privileges or user interaction, with a high impact on confidentiality but no impact on integrity or availability. No patch or official remediation guidance has been published as of the data provided.

An attacker can remotely access restricted functionality without authentication, potentially leading to unauthorized disclosure of sensitive information or other confidentiality breaches. There is no indication of impact on data integrity or system availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin or disable it if possible to prevent unauthorized access. Monitor for updates from August Infotech regarding patches or official mitigations.