High severity7.6NVD Advisory· Published Jun 7, 2023· Updated Apr 8, 2026

CVE-2019-25149

Description

The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and including, 2.0.6. This allows authenticated attackers with any capability level to deactivate any plugin on the site, including plugins necessary to site functionality or security.

Affected products

Robogallery/Gallery Images Ape
cpe:2.3:a:robogallery:gallery_images_ape:*:*:*:*:*:wordpress:*:*
Range: <=2.0.6
WordPress/Gallery Images Apellm-fuzzy
Range: <=2.0.6
Package: https://wordpress.org/plugins/gallery-images-ape

Patches

Vulnerability mechanics

References

blog.nintechnet.com/wordpress-ape-gallery-plugin-fixed-authenticated-arbitrary-plugin-deactivation-vulnerability/nvdExploit
www.wordfence.com/threat-intel/vulnerabilities/id/dfd6c2b8-b00c-49d1-930f-50397e742ac5nvdBroken LinkThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000