This vulnerability in FPW Category Thumbnails involves missing authorization checks due to misconfigured access control, which may allow users with low privileges to access or manipulate resources they should not be authorized to. It affects all versions up to and including 1.9.5. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact includes low confidentiality, integrity, and availability impacts. No patch or official remediation information is currently available.

The vulnerability could allow an attacker with limited privileges to bypass access controls, potentially leading to unauthorized access or modification of thumbnail categories. The impact is rated medium with low confidentiality, integrity, and availability impacts as per the CVSS score. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations for the FPW Category Thumbnails plugin to minimize exposure. Monitor for updates from the vendor regarding patches or official mitigations.