The vulnerability identified as CVE-2026-25320 affects the Elementor Contact Form DB plugin by Cool Plugins, specifically versions up to 2.1.3. It is classified as a missing authorization issue, meaning the plugin does not properly enforce access control, allowing unauthorized actions that can impact data integrity. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity and no privileges or user interaction required. The vulnerability does not impact confidentiality or availability according to the CVSS vector.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions that alter data integrity within the Elementor Contact Form DB plugin. There is no reported impact on data confidentiality or system availability. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting access to the plugin's functionality and limiting exposure to untrusted users may reduce risk.