This vulnerability in the WP Chill Image Photo Gallery Final Tiles Grid plugin allows an attacker to bypass authorization mechanisms by manipulating a user-controlled key due to improperly configured access control. The affected versions are up to and including 3.6.11. The vulnerability is categorized as an authorization bypass but lacks detailed technical or exploit information. No CVSS score or vendor advisory is currently available, and no patch links have been provided.

Successful exploitation could allow unauthorized users to access or perform actions that should be restricted by the plugin's access control mechanisms. The exact impact depends on the plugin's usage context but generally involves unauthorized access to gallery management or content. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from WP Chill and consider restricting access to the plugin's administrative interfaces as a precaution.