CVE-2026-0635 is a missing authorization vulnerability (CWE-862) in the Responsive Accordion Slider WordPress plugin by techknowprime. The issue arises from the absence of a capability check in the 'resp_accordion_silder_save_images' function, which handles saving image metadata for sliders. Authenticated users with Contributor-level access or higher can exploit this to modify slider image metadata such as titles, descriptions, alt text, and links. This vulnerability affects all versions up to and including 1.2.2. The CVSS 3.1 base score is 4.3, reflecting a medium severity impact primarily on integrity. No patch or vendor advisory is currently available.

An attacker with Contributor-level or higher access can modify image metadata of sliders, potentially misleading users or affecting site content integrity. There is no direct impact on confidentiality or availability reported. The vulnerability does not allow unauthenticated access or privilege escalation beyond the Contributor role.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict Contributor-level access to trusted users only and monitor for unauthorized changes to slider content. Avoid granting Contributor or higher privileges to untrusted users to reduce risk.