The vulnerability identified as CVE-2026-24939 affects the Modula Image Gallery plugin by WP Chill. It is characterized by missing authorization checks due to incorrectly configured access control, potentially allowing users with limited privileges to access or perform actions they should not be authorized for. This affects all versions up to 2.13.6. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and requires privileges but no user interaction. The impact is limited to partial confidentiality loss without affecting integrity or availability. No patch or official remediation information is currently available.

The vulnerability could allow an attacker with some level of privileges to bypass authorization controls, potentially exposing some confidential information. There is no impact on data integrity or system availability. The overall impact is considered medium severity based on the CVSS score of 4.3. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review user privileges carefully and restrict access to trusted users only. Monitor for updates from WP Chill regarding patches or mitigations for this vulnerability.