The vulnerability identified as CVE-2026-25375 affects the WP Chill Image Photo Gallery Final Tiles Grid plugin up to version 3.6.10. It is caused by missing authorization checks, resulting in incorrectly configured access control security levels. This can allow an attacker with low privileges to perform actions that should be restricted, impacting the availability of the affected system. The CVSS v3.1 score is 4.3, reflecting a network attack vector with low complexity and no user interaction required, but limited impact confined to availability.

The impact of this vulnerability is limited to availability disruption (denial of service or similar effects) without compromising confidentiality or integrity. There are no known active exploits in the wild. The vulnerability requires low privileges to exploit and does not require user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor WP Chill's official channels for updates. Until a fix is available, restrict access to the plugin's functionalities to trusted users only and consider disabling or limiting the plugin if possible to reduce exposure.