CVE-2025-31533

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Mar 31, 2025
Updated: Apr 1, 2025
CWE ID 862

Summary

CVE-2025-31533 is a Missing Authorization vulnerability discovered in the Salesmate.io Salesmate Add-On for Gravity Forms. This issue allows unauthorized access to functionality within the add-on, bypassing Access Control Lists (ACLs). Affected versions of the Salesmate Add-On for Gravity Forms range from n/a to 2.0.3. Successful exploitation of this vulnerability could lead to significant data exposure or unintended modifications. Users are strongly advised to update their add-ons to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share