bPlugins 3D Image Gallery Missing Authorization Vulnerability

A missing authorization vulnerability has been identified in the bPlugins Image Gallery block, specifically in versions through 1.0.7. This vulnerability allows users to access functionality that is not properly restricted by access control lists (ACLs), potentially leading to unauthorized actions within the gallery management features.

Impact

Exploitation of this vulnerability could result in unauthorized access to gallery creation and management functions, allowing users to manipulate photo galleries or albums without proper authorization.