CVE-2025-2505
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 20, 2025
CWE ID 22
Summary
CVE-2025-2505 is a vulnerability affecting the Age Gate plugin for WordPress. Maliciously crafted 'lang' parameters can lead to Local PHP File Inclusion, enabling unauthenticated attackers to include and execute arbitrary PHP files. This can result in bypassing access controls, data leakage, or code execution. Versions up to 3.5.3 are impacted.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.