This vulnerability (CVE-2025-29004) is classified as CWE-266, indicating incorrect privilege assignment in AA-Team's WordPress plugins for age verification and landing page management. The flaw allows users with limited privileges to escalate their privileges, potentially gaining unauthorized access or control. The CVSS v3.1 score is 8.8, reflecting high impact on confidentiality, integrity, and availability. The issue affects Premium Age Verification / Restriction for WordPress versions through 3.0.2 and Responsive Coming Soon Landing Page / Holding Page versions through 3.0. No patch or remediation details are currently provided.

Successful exploitation of this vulnerability could allow an attacker with some level of access to escalate privileges, potentially leading to full compromise of the affected WordPress site. This includes unauthorized access to sensitive data, modification of site content, or disruption of service. The high CVSS score indicates significant risk to confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to affected plugins and monitoring for suspicious activity related to privilege escalation attempts. Avoid granting unnecessary privileges to users and review plugin usage carefully.