The Salesmate Add-On for Gravity Forms contains a missing authorization vulnerability (CVE-2025-31533) that permits access to functionality without proper ACL enforcement. Affected versions include all releases up to and including 2.0.3. The vulnerability is network exploitable without privileges or user interaction and impacts availability but not confidentiality or integrity. No patch or mitigation guidance has been provided by the vendor or third parties as of the publication date.

Exploitation of this vulnerability could allow an unauthenticated attacker to invoke certain functions of the Salesmate Add-On for Gravity Forms that should be restricted, potentially leading to denial of service or other availability impacts. There is no impact on data confidentiality or integrity reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from Salesmate.io and consider restricting access to the affected add-on where possible. No vendor-provided mitigation or temporary fix is currently documented.