CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11.
Explanation of Vulnerability in Simple Terms
The Image Photo Gallery Final Tiles Grid plugin for WordPress contains an authorization flaw that allows authenticated users with low privileges to access sensitive image data they should not be able to view. An attacker with a basic user account can read photo gallery information without proper permission checks. This affects versions up to 3.6.11.
What an attacker can do
Read image gallery data and metadata that should be restricted to higher-privilege users.
Potential impact on your site
Private or restricted gallery content may be exposed to low-privilege users, compromising content confidentiality.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
