📄 WordPress Age Gate 3.5.2 Unauthenticated LFI / Remote Code Execution

WordPress Age Gate plugin version 3.5.2 contains an unauthenticated local file inclusion to remote code execution vulnerability. A remote attacker can traverse the filesystem and include attacker-controlled PHP code, resulting in remote code execution when a suitable file is already present. This...

CVE-2025-2505

creationtimestamp| type| source ---|---|--- 2025-03-20 08:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkscf7ljn32v 2025-03-20 09:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomzswc26 2025-03-20 09:30:37+00:00| published-proof-of-concept|...