What is CVE-2019-25149?

CVE-2019-25149 is a high-severity vulnerability in Galleryape Gallery Images Ape, classified under Improper Authorization. CVSS score: 7.6/10. Published 2023-06-07.

How severe is CVE-2019-25149?

High severity. CVSS v3 base score is 7.6 out of 10.

Is CVE-2019-25149 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Galleryape Gallery Images Ape

CVE-2019-25149

The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and including, 2.0.6. This allows authenticated attackers with any capability level to deactivate any plugin on the site, including plugins necessary to site functionality or security.

EPSS: 0.006 (45.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H.

Affected products

Galleryape Gallery Images Ape — versions 0
Robogallery Gallery_images_ape

Weakness classification (CWE)

CWE-285 — Improper Authorization

Public proof-of-concept exploits

20142995/nuclei-templates

References

security@wordfence.com (Third Party Advisory, Broken Link)
security@wordfence.com (Exploit)

Frequently asked questions

What is CVE-2019-25149?: CVE-2019-25149 is a high-severity vulnerability in Galleryape Gallery Images Ape, classified under Improper Authorization. CVSS score: 7.6/10. Published 2023-06-07.
How severe is CVE-2019-25149?: High severity. CVSS v3 base score is 7.6 out of 10.
Is CVE-2019-25149 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.