Vulnerability · Published Jan 6, 2026 · Assigned by Patchstack
CVE-2025-29004Privilege Escalation Vulnerability in AA-Team WordPress plugins
High 8.8
In plain English
A high-severity security flaw in Premium Age Verification / Restriction for WordPress from AA-Team. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Official description
Incorrect Privilege Assignment vulnerability in AA-Team Premium Age Verification / Restriction for WordPress, AA-Team Responsive Coming Soon Landing Page / Holding Page for WordPress allows Privilege Escalation.This issue affects Premium Age Verification / Restriction for WordPress: from n/a through 3.0.2; Responsive Coming Soon Landing Page / Holding Page for WordPress: from n/a through 3.0.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AA-Team | Premium Age Verification / Restriction for WordPress | n/a – through 3.0.2 |
| AA-Team | Responsive Coming Soon Landing Page / Holding Page for WordPress | n/a – through 3.0 |
Weakness: CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://patchstack.com/database/wordpress/plugin/age-restriction/vulnerability/wordpress-premium-age-verification-restriction-for-wordpress-plugin-3-0-2-privilege-escalation-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/wordpress/plugin/wordpress-flat-countdown/vulnerability/wordpress-responsive-coming-soon-landing-page-holding-page-for-wordpress-3-0-privilege-escalation-vulnerability?_s_id=cve vdb-entry