Authorization Bypass Vulnerability in Funnel Builder Plugin for WordPress

CVE-2019-25151

What is CVE-2019-25151?

The Funnel Builder plugin for WordPress is susceptible to an authorization bypass due to inadequate capability verification on the activate_plugin function. This vulnerability allows authenticated attackers to activate any plugin installed on the WordPress site, which could lead to significant security risks, including unauthorized access and control over the site. The issue affects versions of the plugin up to and including 1.3.0, highlighting the importance of keeping WordPress plugins updated and implementing proper security measures.

References