The vulnerability identified as CVE-2024-49325 affects the Photo Gallery Builder plugin by wpdiscover, specifically versions up to 3.0. It is characterized by missing authorization controls, which means certain functions can be accessed without proper ACL enforcement. The CVSS vector indicates network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but a low integrity impact. No patch or mitigation details are currently available from the vendor or other sources.

An attacker with some level of privileges could exploit this vulnerability to perform actions or access functionality that should be restricted, potentially leading to unauthorized modification of data (integrity impact). There is no impact on confidentiality or availability according to the CVSS metrics. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict plugin usage to trusted users with appropriate privileges and monitor for updates from wpdiscover regarding patches or mitigations.