CVE-2025-31012CWE-862
WordPress Age Gate plugin <= 3.5.4 - Broken Access Control Vulnerability
Medium · published April 9, 2025
What it is
Missing Authorization vulnerability in Phil Age Gate age-gate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Age Gate: from n/a through <= 3.5.4.
The record
Technical detail
- CVSS v3.1
- 5.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00517 · 43.1th percentile
- Weakness
- CWE-862 · Missing Authorization
- Published
- 2025-04-09T16:10Z
EPSS history
Timeline