The vulnerability CVE-2025-31413 is a CSRF issue in the bdthemes Element Pack Elementor Addons plugin for WordPress, affecting versions up to 8.3.13. It allows attackers to induce authenticated users to perform unintended actions by exploiting the lack of proper request validation. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, no privileges required, but requiring user interaction. The impact is limited to integrity loss without confidentiality or availability impact. No patch or remediation details are currently available.

An attacker could exploit this vulnerability to perform unauthorized actions on behalf of an authenticated user, potentially altering settings or content within the affected plugin. However, the impact is limited to integrity loss with no direct confidentiality or availability consequences. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible, or limiting plugin usage to trusted environments. Monitor vendor channels for updates.