CVE-2025-13603
Awaiting Analysis Awaiting Analysis - Queue
Unauthorized Arbitrary File Read in WP Audio Gallery Plugin

Publication date: 2026-02-19

Last updated on: 2026-02-19

Assigner: Wordfence

Description
The WP AUDIO GALLERY plugin for WordPress is vulnerable to Unauthorized Arbitrary File Read in all versions up to, and including, 2.0. This is due to insufficient capability checks and lack of nonce verification on the "wpag_htaccess_callback" function This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the site's .htaccess file with arbitrary content, which can lead to arbitrary file read on the server under certain configurations.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-19
Last Modified
2026-02-19
Generated
2026-06-16
AI Q&A
2026-02-19
EPSS Evaluated
2026-06-15
NVD
CVE-2025-13603
EUVD
EUVD-2025-207917
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
wp_audio_gallery wp_audio_gallery to 2.0 (inc)
wp_audio_gallery plugin to 2.0 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The WP AUDIO GALLERY plugin for WordPress has a vulnerability in all versions up to and including 2.0. This vulnerability arises because the plugin does not properly check user capabilities and lacks nonce verification in the function named "wpag_htaccess_callback." As a result, authenticated users with subscriber-level access or higher can overwrite the site's .htaccess file with arbitrary content.

This improper handling can lead to unauthorized arbitrary file read on the server under certain configurations.

Impact Analysis

This vulnerability can have serious impacts because it allows authenticated users with low-level access (subscriber or above) to overwrite the .htaccess file on the server.

By modifying the .htaccess file, an attacker can cause arbitrary file reads on the server, potentially exposing sensitive information.

The CVSS score of 8.8 indicates a high severity, with impacts on confidentiality, integrity, and availability.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-13603. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart