This vulnerability in the WP Chill Image Photo Gallery Final Tiles Grid plugin arises from missing authorization checks due to incorrectly configured access control. It affects versions up to and including 3.6.10. The issue allows users with limited privileges to potentially perform actions without proper authorization, impacting availability but not confidentiality or integrity. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and unchanged scope. No vendor advisory or patch information is available at this time.

The vulnerability could lead to availability impacts by allowing unauthorized actions due to missing authorization controls. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict user privileges to minimize risk from unauthorized access. Monitor for updates from WP Chill regarding patches or mitigations.