vulnerability
WordPress Plugin: gallery-images-ape: CVE-2019-25149: Improper Authorization
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:S/C:P/I:P/A:C) | Dec 30, 2019 | May 15, 2025 | May 15, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:C)
Published
Dec 30, 2019
Added
May 15, 2025
Modified
May 15, 2025
Description
The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and including, 2.0.6. This allows authenticated attackers with any capability level to deactivate any plugin on the site, including plugins necessary to site functionality or security.
Solution
gallery-images-ape-plugin-cve-2019-25149
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.