CVE-2026-74003

The RomethemeForm For Elementor plugin version 1.2.6 and earlier has a broken access control vulnerability exploitable by Contributor users. This means a contributor can gain unauthorized access to functions they should not have permissions for.

The risk is that a low-privileged user can perform administrative operations, potentially leading to data integrity issues or unauthorized configuration changes.

It is recommended to update the plugin to the latest version that includes a fix for this vulnerability.