This vulnerability in GrandPlugins Image Sizes Controller arises from missing authorization checks, allowing users with limited privileges to perform actions related to creating or disabling custom image sizes without proper access control. The issue affects versions up to 1.0.10 and is classified with a CVSS 3.1 base score of 4.3, reflecting a network attack vector with low complexity, requiring low privileges, no user interaction, and resulting in integrity impact only. No vendor patch or advisory is currently available, and the product is not a cloud service.

The vulnerability allows unauthorized modification of image size settings, potentially leading to integrity issues within the affected system. There is no impact on confidentiality or availability. Since the attack complexity is low and requires only low privileges, an attacker with limited access could exploit this to alter image size configurations improperly. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Image Sizes Controller to trusted users only and review user privileges to minimize exposure. Monitor for updates from GrandPlugins regarding patches or official mitigations.