The vulnerability identified as CVE-2025-31796 is a Server-Side Request Forgery (SSRF) issue in TheInnovs ElementsCSS Addons for Elementor plugin, affecting versions up to 1.0.8.9. SSRF vulnerabilities enable attackers to make the server perform unauthorized HTTP requests, potentially leading to information disclosure or other impacts depending on the server's network environment. The CVSS vector indicates the attack requires network access with high attack complexity, no privileges, and no user interaction, and impacts confidentiality and integrity with no impact on availability.

An attacker exploiting this SSRF vulnerability could cause the affected server to make unintended HTTP requests, potentially exposing internal resources or sensitive information. The impact is rated medium due to limited confidentiality and integrity effects and the requirement for high attack complexity. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor TheInnovs' official channels for updates. Until a fix is available, restricting network access and validating or sanitizing user inputs related to URL requests may help mitigate risk.