| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | CVE-2025-2505 | 20 Mar 202508:40 | – | circl |
 | WordPress plugin Age Gate 路径遍历漏洞 | 20 Mar 202500:00 | – | cnnvd |
 | CVE-2025-2505 Age Gate <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang' | 20 Mar 202507:29 | – | cvelist |
 | EUVD-2025-6740 | 3 Oct 202520:07 | – | euvd |
 | WordPress Age Gate <= 3.5.3 - Unauthenticated Local File Inclusion | 14 Oct 202602:05 | – | nuclei |
 | CVE-2025-2505 | 20 Mar 202508:15 | – | nvd |
 | 📄 WordPress Age Gate 3.5.2 Unauthenticated LFI / Remote Code Execution | 21 Jul 202600:00 | – | packetstorm |
 | WordPress Age Gate plugin <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang' vulnerability | 19 Mar 202519:49 | – | patchstack |
 | PT-2025-12016 | 20 Mar 202500:00 | – | ptsecurity |
 | CVE-2025-2505: Improper Limitation of a Pathname to a Restricted Directory | 20 Mar 202500:00 | – | rapid7 |
10
[
{
"vendor": "philsbury",
"product": "Age Gate",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "3.5.3",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| age_gate[lang] | request body | /wp-admin/admin-ajax.php | Unauthenticated Local File Inclusion via age_gate[lang] parameter leading to potential RCE through admin-ajax flow. | |
| age_gate[lang] | request body | /wp-json/age-gate/v3/check | Unauthenticated Local File Inclusion via age_gate[lang] parameter in REST route, enabling potential RCE. |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 09:07Current
9.9Critical risk
Vulners AI Score9.9
CVSS 3.19.8
EPSS0.04884
SSVC