CVE-2019-25149CWE-285

Gallery Images Ape <= 2.0.6 - Authenticated Plugin Deactivation

High · published June 7, 2023

CVSS v3.1
7.6
EPSS
1%
Percentile
48.4
In the wild
Unconfirmed
What it is

The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and including, 2.0.6. This allows authenticated attackers with any capability level to deactivate any plugin on the site, including plugins necessary to site functionality or security.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00607 · 48.4th percentile
Weakness
CWE-285 · Improper Authorization
Published
2023-06-07T01:51Z
EPSS history
Timeline
  • 07 JUN 01:51Z
    Gallery Images Ape <= 2.0.6 - Authenticated Plugin Deactivation
    cvelistv5