CVE-2019-25151

Name of the Vulnerable Software and Affected Versions Funnel Builder plugin for WordPress versions up to, and including, 1.3.0

Description The issue is related to authorization bypass due to a missing capability check on the activate plugin function. This allows authenticated attackers to activate any plugin on the vulnerable service.

Recommendations For versions up to, and including, 1.3.0, update to a version that includes a fix for the missing capability check on the activate plugin function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.