This vulnerability (CVE-2026-27424) in WP Chill's Image Photo Gallery Final Tiles Grid plugin is classified as CWE-862 (Missing Authorization). It allows an attacker with low privileges to access functionality or data that should be restricted due to improper access control configuration. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, and limited confidentiality impact without integrity or availability impact. The affected versions include all versions up to 3.6.11. No patch or official remediation level has been published by the vendor as of the publication date.

The vulnerability could allow an attacker with some level of privileges to bypass authorization controls, potentially leading to limited unauthorized access to information. The impact is limited to confidentiality with no reported effects on integrity or availability. There are no known active exploits targeting this vulnerability currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been published, users should monitor WP Chill's official channels for updates. Until a patch is available, review and tighten access control configurations where possible to reduce exposure.