PT-2023-11376 · WordPress · Gallery Images Ape

Jerome Bruandet · Publicado 2023-06-07 · Atualizado 2023-06-13 · CVE-2019-25149

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions The Gallery Images Ape plugin for WordPress versions up to, and including, 2.0.6

Description The issue allows authenticated attackers with any capability level to deactivate any plugin on the site, including those necessary for site functionality or security.

Recommendations For versions up to, and including, 2.0.6, update to a version later than 2.0.6 to resolve the issue.

Exploit

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2019-25149

Produtos afetados

Gallery Images Ape

Referências · 5

• 🔥 https://blog.nintechnet.com/wordpress-ape-gallery-plugin-fixed-authenticated-arbitrary-plugin-deactivation-vulnerability · Exploit
• https://wordfence.com/threat-intel/vulnerabilities/id/dfd6c2b8-b00c-49d1-930f-50397e742ac5?source=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25149 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-25149 · Aviso do Fabricante
• https://t.me/cvenotify/51931 · Publicação no Telegram