Extension WordPress
Vulnérabilités Admin and Site Enhancements (ASE)
Cette page rassemble les failles publiées pour Admin and Site Enhancements (ASE), leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Admin and Site Enhancements (ASE)
10 fiches
Admin and Site Enhancements (ASE) <= 8.4.0 – Missing Authorization
The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 8.4.0. This makes it possible for authenticated attackers, with…
*-8.4.0
8.4.1
27/02/2026
Admin and Site Enhancements (ASE) <= 7.6.2.1 – Authenticated (Subscriber+) Privilege Escalation
The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.6.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges…
*-7.6.2.1
7.6.3
20/01/2026
Admin and Site Enhancements (ASE) <= 8.0.8 – Missing Authorization
The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 8.0.8. This makes it possible for authenticated attackers,…
*-8.0.8
8.1.0
15/12/2025
Admin and Site Enhancements <= 7.9.7 – Authenticated (Author+) Stored Cross-Site Scripting via SVG
The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 7.9.7 due to insufficient input sanitization and output escaping. This makes it…
*-7.9.7
7.9.8
01/09/2025
Admin and Site Enhancements (ASE) <= 7.6.9 – Password Protection Bypass
The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to Password Protection Bypass in all versions up to, and including, 7.6.9. This is due to the plugin using a hardcoded password for password protection. This makes…
*-7.6.9
7.6.10
07/04/2025
Admin and Site Enhancements (ASE) <= 7.6.9 – IP Spoofing to Limit Login Attempt Bypass
The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 7.6.9 due to insufficient IP address validation. This makes it possible for unauthenticated attackers to bypass…
*-7.6.9
7.6.10
11/02/2025
Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 – Authenticated (Subscriber+) Privilege Escalation
The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 7.6.2.1. This is due to the plugin not properly restricting user's ability to utilize the “View…
*-7.6.2.1
7.6.3
03/02/2025
Admin and Site Enhancements (ASE) <= 7.6.2 – Missing Authorization
The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 7.6.2. This makes it possible for authenticated attackers,…
*-7.6.2
7.6.3
24/01/2025
Admin and Site Enhancements (ASE) <= 7.5.1 – Authenticated Stored Cross-Site Scripting via SVG
The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 7.5.1 due to insufficient input sanitization and output escaping. This makes it…
*-7.5.1
7.5.2
11/11/2024
Admin and Site Enhancements (ASE) <= 5.7.1 – Password Protection Mode Security Feature Bypass
The Admin and Site Enhancements (ASE) plugin for WordPress is vulnerable to security feature bypass in all versions up to, and including, 5.7.1. This is due to a flawed authentication mechanism within the maybe_process_login function. This makes it…
*-5.7.1
5.8.0
25/10/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.