Premium Age Verification and Restriction for WordPress Arbitrary File Read and Write Vulnerability

A vulnerability allowing unauthenticated arbitrary file read and write has been identified in the Premium Age Verification / Restriction for WordPress plugin, affecting all versions through 3.0.2. The issue arises from an insufficiently protected remote support feature in remote_tunnel.php, which could lead to the exposure of sensitive information or allow remote code execution.

Impact

Exploitation of this vulnerability could result in unauthorized access to read from or write to arbitrary files on the affected server, potentially leading to the exposure of sensitive information or allowing remote code execution.

Remediation

No known patch is available. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.