Lucene search
+L

757 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/24 12:00 a.m.17 views

Age Gates Plugin for WordPress < 3.5.4 Local File Inclusion

The WordPress Age Gate Plugin installed on the remote host is affected by a Local File Inclusion. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

9.8CVSS7.4AI score0.04802EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/03/22 8:08 a.m.23 views

CVE-2025-2505

The Age Gate plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 3.5.3 via the 'lang' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of code in those...

9.8CVSS8.3AI score0.04802EPSS
SaveExploits1References1
CVE
CVE
added 2025/03/20 7:29 a.m.179 views

CVE-2025-2505

The CVE-2025-2505 entry concerns the WordPress Age Gate plugin, affected versions up to and including 3.5.3. A local PHP file inclusion via the lang parameter allows unauthenticated attackers to include and execute arbitrary PHP files on the server, potentially bypassing access controls and expos...

9.8CVSS9.9AI score0.04802EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/03/20 7:29 a.m.34 views

CVE-2025-2505 Age Gate <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang'

The Age Gate plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 3.5.3 via the 'lang' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of code in those...

9.8CVSS0.04802EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/03/20 7:29 a.m.21 views

CVE-2025-2505 Age Gate <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang'

The Age Gate plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 3.5.3 via the 'lang' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of code in those...

9.8CVSS9.9AI score0.04802EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/03/20 12:00 a.m.17 views

WordPress plugin Age Gate 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

9.8CVSS8.9AI score0.04802EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/03/20 12:00 a.m.18 views

PT-2025-12016

Name of the Vulnerable Software and Affected Versions: Age Gate plugin for WordPress versions up to, and including, 3.5.3 Description: The Age Gate plugin for WordPress is vulnerable to Local PHP File Inclusion via the lang parameter. This allows unauthenticated attackers to include and execute...

9.8CVSS7.2AI score0.04802EPSS
SaveExploits1References18
Patchstack
Patchstack
added 2025/03/19 7:49 p.m.17 views

WordPress Age Gate plugin <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang' vulnerability

Unauthenticated Local PHP File Inclusion via 'lang' vulnerability discovered by mikemyers in WordPress Plugin Age Gate versions = 3.5.3...

9.8CVSS8.9AI score0.04802EPSS
SaveExploits1References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2025/03/19 12:00 a.m.5 views

VulnCheck KEV: CVE-2025-2505

The Age Gate plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 3.5.3 via the 'lang' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of code in...

9.8CVSS6.2AI score0.04802EPSS
SaveExploits1References1
The Hacker News
The Hacker News
added 2025/03/03 1:56 p.m.12 views

U.K. ICO Investigates TikTok, Reddit, and Imgur Over Children's Data Protection Practices

The U.K.'s Information Commissioner's Office ICO has opened an investigation into online platforms TikTok, Reddit, and Imgur to assess the steps they are taking to protect children between the ages of 13 and 17 in the country. To that end, the watchdog said it's probing how the ByteDance-owned...

6.9AI score
SaveExploits0
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.29 views

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: flux-notification-controller, ini-file, skopeo, spire-controller-manager, podman, fq, boring-registry, octo-sts, configmap-reload, terraform-docs, pluto, kapp, wgcf, secrets-store-csi-driver-provider-gcp, helm, stakater-reloader, nsc, temporal-ui-server,...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/21 4:35 a.m.10 views

CVE-2025-22622

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php...

4.3CVSS6.8AI score0.00284EPSS
SaveExploits0References4
NVD
NVD
added 2025/02/19 4:15 a.m.14 views

CVE-2025-22622

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php...

4.3CVSS0.00284EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/19 3:51 a.m.46 views

CVE-2025-22622 Age Verification - Reflected cross-site scripting (XSS)

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php...

4.3CVSS0.00284EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/19 3:51 a.m.8 views

CVE-2025-22622 Age Verification - Reflected cross-site scripting (XSS)

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php...

4.3CVSS4.7AI score0.00284EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/19 3:51 a.m.82 views

CVE-2025-22622

CVE-2025-22622 : WordPress Age Verification plugin for checkout (Age Verification for your checkout page / agecheckernet, version

4.3CVSS4.6AI score0.00284EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/19 12:00 a.m.9 views

PT-2025-6950 · Unknown · Age Verification For Your Checkout Page

Name of the Vulnerable Software and Affected Versions: Age Verification for your checkout page Verify your customer's identity version 1.20.0 Description: The web application dynamically generates web content without validating the source of potentially untrusted data. This issue is located in th...

4.3CVSS9.2AI score0.00284EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/02/19 12:00 a.m.10 views

WordPress plugin Age Verification for your checkout page. Verify your customer s identity 跨站脚本漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Age Verification for your checkout page...

4.3CVSS7.6AI score0.00284EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 6:37 a.m.12 views

CVE-2024-5091

The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Age Gate and Creative Slider widgets in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

7.4CVSS5.8AI score0.00298EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:35 a.m.10 views

CVE-2024-55979

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in robindkumar Wr Age Verification wr-age-verification allows SQL Injection.This issue affects Wr Age Verification: from n/a through = 2.0.0...

8.5CVSS7.3AI score0.00502EPSS
SaveExploits0References1
Rows per page
Query Builder