Arbitrary File Read and Write Vulnerability in Premium Age Verification Plugin for WordPress

CVE-2025-7401

What is CVE-2025-7401?

The Premium Age Verification / Restriction plugin for WordPress contains a security vulnerability that allows unauthenticated attackers to read from and write to arbitrary files on the server. This issue arises from poorly secured remote support functionality in remote_tunnel.php, impacting all versions up to and including 3.0.2. Attackers could potentially exploit this flaw to access sensitive information or execute arbitrary code, posing significant security risks to affected WordPress sites.

References