The vulnerability identified as CVE-2025-23785 affects the AI Responsive Gallery Album plugin by August Infotech. It is caused by missing authorization checks, which result in incorrectly configured access control security levels. This allows users with some privileges (PR:L) to perform unauthorized actions that can lead to integrity impacts without requiring user interaction. The vulnerability affects all versions up to and including 1.4. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The impact of this vulnerability is limited to integrity, meaning an attacker with limited privileges could modify data or perform unauthorized actions within the affected plugin. There is no confidentiality or availability impact reported. The medium severity rating reflects the moderate risk posed by this access control weakness. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor August Infotech communications for updates. Until a fix is available, restrict access to trusted users and review permissions to minimize risk from this missing authorization vulnerability.