nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-36901 CVE-2021-36901
MEDIUM
WordPress Age Gate plugin <= 2.17.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
Record summary
CVE-2021-36901 has a selected CVSS score of 6.1 (medium).
Description
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Phil Baker's Age Gate plugin <= 2.17.0 at WordPress.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Oct 21, 2021 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 20, 2025 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Age Gate (WordPress plugin)Browse Phil Baker / Age Gate (WordPress plugin) | CVE List | <= 2.17.0 to ≤ 2.17.0 | affected |
age_gateBrowse asylumdigital / age_gate | VulnCheck | Version data not supplied | |
References
3patchstack.comConfirmation
https://patchstack.com/database/vulnerability/age-gate/wordpress-age-gate-plugin-2-17-0-unauthenticated-stored-cross-site-scripting-xss-vulnerability wordpress.orgConfirmation
https://wordpress.org/plugins/age-gate