Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route

Description

The plugin does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the plugin's own gallery content, allowing users with contributor-level access to create and publish gallery posts that the plugin's settings otherwise withhold from them.