This vulnerability in the A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow plugin arises from missing authorization controls, allowing users with limited privileges to perform actions without proper permission checks. The affected versions include all releases up to 1.3.9. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low complexity, low privileges required, no user interaction, unchanged scope, limited confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is currently available.

The vulnerability could allow an attacker with limited privileges to access or perform actions that should require higher authorization, potentially leading to limited confidentiality loss. There is no indication of impact on integrity or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin features to trusted users only and monitor for any unusual activity related to the plugin. Avoid granting unnecessary privileges to users who can interact with the Media Slider plugin.