This vulnerability involves missing authorization checks in the A WP Life Video Gallery plugin (Api Gallery, YouTube and Vimeo, Link Gallery), versions up to 1.5.3. It allows an attacker with low privileges to perform actions or access resources that should require higher authorization. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low complexity, low privileges required, no user interaction, and limited confidentiality impact. No official fix or patch has been published yet, and no known exploits have been reported.

An attacker with low privileges may gain unauthorized access to certain features or data within the affected plugin, potentially leading to limited confidentiality impact. There is no indication of integrity or availability impact. The vulnerability does not require user interaction and can be exploited remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected plugin's functionality to trusted users only or disabling the plugin if feasible. Monitor vendor communications for updates on patches or official mitigations.