EUVD-2025-74047

The age-restriction WordPress plugin through 3.0.2 does not have authorisation in the agerestrictionRemoteSupportRequest function, allowing any authenticated users, such as subscriber to create an admin user with a hardcoded username and arbitrary password...

CVE-2025-11855

The age-restriction WordPress plugin through 3.0.2 does not have authorisation in the agerestrictionRemoteSupportRequest function, allowing any authenticated users, such as subscriber to create an admin user with a hardcoded username and arbitrary password...

CVE-2025-11855 Age Restriction <= 3.0.2 - Subscriber+ Privilege Escalation

The age-restriction WordPress plugin through 3.0.2 does not have authorisation in the agerestrictionRemoteSupportRequest function, allowing any authenticated users, such as subscriber to create an admin user with a hardcoded username and arbitrary password...

CVE-2025-11855

CVE-2025-11855 affects the WordPress plugin “age-restriction” (versions up to 3.0.2). The root cause is missing authorization in the age_restrictionRemoteSupportRequest function, enabling any authenticated user (e.g., a subscriber) to create an administrator account with a hardcoded username and ...

CVE-2025-11855 Age Restriction <= 3.0.2 - Subscriber+ Privilege Escalation

The age-restriction WordPress plugin through 3.0.2 does not have authorisation in the agerestrictionRemoteSupportRequest function, allowing any authenticated users, such as subscriber to create an admin user with a hardcoded username and arbitrary password...

PT-2025-46301

Name of the Vulnerable Software and Affected Versions age-restriction WordPress plugin versions through 3.0.2 Description The age-restriction WordPress plugin does not have proper authorisation within the age restrictionRemoteSupportRequest function. This allows authenticated users, even those wi...

Would you sext ChatGPT? (Lock and Code S06E22)

This week on the Lock and Code podcast … In the final, cold winter months of the year, ChatGPT could be heating up. On October 14, OpenAI CEO Sam Altman said that the "restrictions" that his company previously placed on their flagship product, ChatGPT, would be removed, allowing, perhaps, for...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: ini-file, cue, iptables-wrappers, skopeo, docker-machine-driver-linode, nova, spire-controller-manager, fq, boring-registry, octo-sts, configmap-reload, mongo-tools, kubebuilder, container-object-storage-interface, kubernetes-csi-external-health-monitor,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port, custom-pod-autoscaler,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, ini-file, kubevela, mkcert, iptables-wrappers, skopeo, opensearch-k8s-operator, dive, helm-set-status, docker-machine-driver-linode, nova, redka, spire-controller-manager, cloud-sql-proxy, regclient, wait-for-port,...