This vulnerability in bPlugins Image Gallery block (versions <= 1.0.7) stems from missing authorization checks, allowing users with limited privileges to access functionality that should be restricted by Access Control Lists (ACLs). Specifically, the flaw enables unauthorized access to create and display photo galleries or albums. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact.

Exploitation of this vulnerability can lead to unauthorized users performing actions related to photo gallery creation and display, potentially disrupting availability and causing integrity issues within the affected application. There is no direct confidentiality impact reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — no official patch or remediation information is provided. Users should monitor the vendor's advisory channels for updates. Until a fix is available, restrict access to the affected Image Gallery block to trusted users only and review ACL configurations to minimize exposure.