The vulnerability is a missing authorization flaw in the WordPress Re Gallery plugin. It enables an attacker to exploit incorrectly configured access‑control security levels, allowing them to bypass role checks and access or modify data that should be restricted. The weakness is an access‑control issue (CWE‑862).

Any WordPress site that uses the Re Gallery plugin at version 1.18.9 or earlier is affected. The impact applies to users who can interact with the plugin interface, including those with limited or no administrative privileges.

The CVSS score of 5.3 indicates moderate severity. The EPSS score is below 1 %, suggesting a low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The flaw stems from incorrectly configured access controls in the plugin’s web interface; no available public exploits are reported as of the data provided.