PT-2025-29199 · WordPress · Premium Age Verification / Restriction For Wordpress

Ch4R0N · Published 2025-07-11 · Updated 2025-07-11 · CVE-2025-7401

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Premium Age Verification / Restriction for WordPress plugin for WordPress versions up to and including 3.0.2

Description: The Premium Age Verification / Restriction for WordPress plugin is susceptible to arbitrary file read and write issues due to an insufficiently protected remote support functionality within the remote tunnel.php file. This allows unauthenticated attackers to read from or write to arbitrary files on the affected server, potentially leading to sensitive information disclosure or remote code execution.

Recommendations: Versions prior to and including 3.0.2: Update to a version beyond 3.0.2.

Fix

RCE

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-7401

Affected Products

Premium Age Verification / Restriction For Wordpress

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-7401 · Security Note
• https://twitter.com/VulmonFeeds/status/1943635527137173725 · Twitter Post
• https://t.me/cvenotify/128491 · Telegram Post
• https://t.me/cvetracker/27530 · Telegram Post
• https://twitter.com/CVEnew/status/1943668144599630001 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/e0906a45-6d9b-48a0-98ae-df7b591a8848?source=cve · Note
• https://codecanyon.net/item/premium-age-verification-restriction-for-wordpress/11300327 · Note