Meta-box GalleryMeta Missing Authorization Vulnerability in WordPress

A vulnerability exists in the Meta-box GalleryMeta plugin for WordPress, all versions through 3.0.1, allowing unauthorized data modification. The issue arises from a lack of capability checks on the 'mb_gallery' custom post type. This flaw enables authenticated attackers with Author-level access or higher to create and publish galleries.

Impact

Exploitation of this vulnerability could lead to unauthorized gallery creation and publication, allowing attackers to manipulate gallery data without proper authorization.