CVE-2019-25149

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p47

Published

Jun 7, 2023 (Jun 7, 2023)

Modified

Jun 17, 2026

Description

The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and including, 2.0.6. This allows authenticated attackers with any capability level to deactivate any plugin on the site, including plugins necessary to site functionality or security.

Vendors: robogallery
Products: gallery images ape
Ecosystems: WordPress
Weakness: CWE-285
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.