CVE-2019-25149
7.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
4.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.7%
The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and including, 2.0.6. This allows authenticated attackers with any capability level to deactivate any plugin on the site, including plugins necessary to site functionality or security.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| robogallery:gallery_images_ape | robogallery gallery images ape | le | 2.0.6 |
CNA Affected
[
{
"vendor": "galleryape",
"product": "Gallery Images Ape",
"versions": [
{
"version": "*",
"status": "affected",
"lessThan": "2.0.7",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]Related
7.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
4.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.7%