The GB Gallery Slideshow plugin versions up to 1.3 suffer from a missing authorization vulnerability, where access control security levels are incorrectly configured. This flaw permits users with limited privileges to exploit the plugin by bypassing intended access restrictions, potentially leading to unauthorized actions that impact the integrity of the system. The CVSS v3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, and limited impact on integrity without affecting confidentiality or availability.

The vulnerability allows users with some level of privileges to perform unauthorized actions due to missing or misconfigured access control in the GB Gallery Slideshow plugin. The impact is limited to integrity, with no direct confidentiality or availability impact reported. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges to the minimum necessary and monitor plugin usage for suspicious activity. Avoid granting unnecessary privileges that could be leveraged to exploit this vulnerability.