WordPress MaxGalleria plugin <= 6.4.2 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Lucio Sá in WordPress Plugin MaxGalleria versions = 6.4.2...