CVE-2025-11448 | Gallery Plugin up to 1.11.0 on WordPress REST API Endpoint bulk-convert authorization

A vulnerability categorized as critical has been discovered in Gallery Plugin up to 1.11.0 on WordPress. This impacts an unknown function of the file /envira-convert/v1/bulk-convert of the component REST API Endpoint. The manipulation results in missing authorization.

This vulnerability is identified as CVE-2025-11448. The attack can be executed remotely. There is not any exploit available.