Rugby News round-up: An undercover reporter posing as a St John Ambulance volunteer got into Cardiff's Millennium Stadium for last month's rugby international between Wales and Australia carrying a fake gun in his first-aid bag and wearing a uniform he bought over the internet.

Wearing a hidden camera, the reporter Gareth Rees stood next to players, spoke to VIP guests such as the bass baritone Bryn Terfel, and entered three hospitality boxes without once being asked to show identification.

Even when he left five minutes before the kick-off, having spent more than an hour inside the stadium, he was not challenged by security officials.

The Millennium Stadium was earlier this year identified by a terrorism expert as a potential target for bombers after the July attacks on London, but a programme tonight on S4C - the Welsh language television station - Y Byd ar Bedwar (The World on Four), will claim security at the ground needs tightening.

Rees carried out the assignment after the station received a tip-off that it would be easy for someone wearing a St John Ambulance uniform to get to the ground unchallenged and gain access to restricted areas.

A second reporter, who had a ticket for the match attended by almost 74,000 supporters, carried a bag into the ground which contained prohibited items, such as a glass and cans of beer, as well as a plastic pistol, and he was not asked to present it for inspection.

"The nearest I came to being challenged was when I tried to get to the dressingroom area," said Rees.

"A steward asked me whether I should be there, but I was still able to get close to the players in the tunnel. I had got through the security gates without anyone asking me to show identification and I entered the bowels of the stadium through the players' entrance.

"We had been told that it would not be difficult to walk around without anyone asking questions if someone posed as a St John Ambulance worker and so it proved. I was surprised at just how easy it was.

"Nobody spotted the fact that I did not have an authentic uniform and only one official queried my presence but he did not take it any further."

The stadium's chief executive Paul Sergeant, who last August admitted he was concerned at the prospect of "media stitch-ups", denied that security at the ground was lax.

"The reporter got in as an ambulanceman and if we start insisting that St John volunteers, who go through police checks before being appointed, stop and show their identification all the time, we run the risk of a heart attack victim not getting treatment quickly enough.

"We take the issue of security very seriously. We have a number of meetings with stewards and the police before every event at the ground. It is physically impossible to check every bag spectators bring in because more than half the crowd turns up 20 minutes before the kick-off."

S4C interviewed the security consultant David Seaborn Davies, who was the head of royal protection with the Metropolitan police in the 1990s. He called the security at the ground disgraceful, adding: "We're at the highest threat of terrorism, and this reporter walked around the place with an unsearched bag and without ID, and nobody challenges him.

"On the evidence I have seen this is an astonishing lapse of security and some serious questions need to be asked at the highest level of what is going on in this place."