Beta

Report

Age Gate <= 3.5.4 is vulnerable to Broken Access Control Vulnerability

Unauthenticated
Published
2025-04-08

The Age Gate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the store() function in all versions up to, and including, 3.5.4. This makes it possible for unauthenticated attackers to update settings.

CVSS

Score:5.3

Severity:Medium

Version: 3.5.4

There is a patch available in v3.6.0 and we strongly recommend you update to this version as soon as possible.