Arbitrary File Read and Write Vulnerability in Premium Age Verification Plugin for WordPress

CVE-2025-7401

What is CVE-2025-7401?

The Premium Age Verification / Restriction plugin for WordPress contains a security vulnerability that allows unauthenticated attackers to read from and write to arbitrary files on the server. This issue arises from poorly secured remote support functionality in remote_tunnel.php, impacting all versions up to and including 3.0.2. Attackers could potentially exploit this flaw to access sensitive information or execute arbitrary code, posing significant security risks to affected WordPress sites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References