This vulnerability in the PDF for Elementor Forms + Drag And Drop Template Builder plugin involves missing authorization checks, which means that users with some privileges (PR:L) can access certain features without proper permission verification. The vulnerability affects all versions up to 6.3.1. The CVSS vector indicates that the attack can be performed remotely over the network (AV:N), requires low attack complexity (AC:L), privileges (PR:L), no user interaction (UI:N), and impacts confidentiality (C:H) but not integrity or availability. No patch or official remediation guidance is currently documented.

Exploitation of this vulnerability could allow an attacker with limited privileges to access sensitive information or functionality that should be restricted, leading to a high confidentiality impact. There is no indication of impact on integrity or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin features to trusted users only and monitor for unusual access patterns related to this plugin.