The vulnerability identified as CVE-2025-24697 affects Realwebcare's Image Gallery – Responsive Photo Gallery plugin versions up to 1.0.5. It is caused by missing authorization checks, which result in incorrect access control configurations. This allows unauthorized users to perform actions that should require proper permissions, impacting the integrity and availability of the affected system. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No patch or official fix has been documented in the provided data.

Exploitation of this vulnerability can lead to unauthorized modification or disruption of the Image Gallery – Responsive Photo Gallery plugin's functionality, affecting the integrity and availability of the affected system. Confidentiality is not impacted according to the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected plugin or implementing compensating controls to limit unauthorized access.