This vulnerability in the Wptexture Image Slider Slideshow plugin allows an attacker with low privileges to bypass authorization controls by manipulating a user-controlled key due to improper access control configuration. It affects all versions up to 1.8. The CVSS score of 4.3 reflects the network attack vector, low attack complexity, and no user interaction required, with impact limited to integrity loss but no confidentiality or availability impact. No patch or vendor advisory is currently available to confirm remediation status.

An attacker with low privileges can bypass authorization controls, potentially allowing unauthorized actions that affect the integrity of the system or data managed by the plugin. There is no impact on confidentiality or availability reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to trusted users only and monitor for suspicious activity related to the plugin. Avoid exposing the plugin to untrusted users where possible.