Block Editor Gallery Slider Missing Authorization Vulnerability on WordPress

A vulnerability exists in the Block Editor Gallery Slider plugin for WordPress, all versions through 1.1.1, allowing unauthorized data modification. The issue arises from a lack of capability checks in the classic_gallery_slider_options() function. This flaw enables authenticated attackers with Subscriber-level access or higher to update limited post meta for arbitrary posts.

Impact

Exploitation of this vulnerability allows for unauthorized modification of post meta data, potentially leading to misleading or incorrect information being displayed on the affected posts.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.