CVE-2024-13231 is a missing authorization vulnerability in the WordPress Portfolio Builder – Portfolio Gallery plugin affecting all versions up to 1.1.7. The issue arises because the 'add_video' function lacks a capability check, enabling unauthenticated attackers to add arbitrary videos to portfolio galleries. This could lead to unauthorized content modification within the affected WordPress sites. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity. No patch or remediation details are currently available, and the plugin is not a cloud service.

An attacker without authentication can add arbitrary videos to portfolio galleries, resulting in unauthorized modification of website content. This may affect the integrity of the portfolio galleries but does not impact confidentiality or availability. There are no known exploits in the wild, and no direct evidence of broader impact such as privilege escalation or remote code execution.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to the plugin's functionality or disabling the plugin if feasible to prevent exploitation. Monitor official sources for updates or patches addressing this vulnerability.