5.3
Moyenne
CVE-2024-13685 The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially…
Description
The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Admin and Site Enhancements (ASE) 7.6 | premières → < 7.6.10 | 7.6.10 |
Autres CVE de Admin and Site Enhancements (ASE)
Les 5 CVE de Admin and Site Enhancements (ASE) →
CVE-2026-19615
The Admin and Site Enhancements (ASE) WordPress plugin before 9.0.1 does not sanitise uploaded SVG files on every…
6.8
Moyenne
CVE-2026-12083
The Admin and Site Enhancements (ASE) WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before…
8.1
Élevée
CVE-2025-9487
The Admin and Site Enhancements (ASE) WordPress plugin before 7.9.8 does not sanitise SVG files when uploaded via…
4.7
Moyenne
CVE-2024-13688
The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password…
5.3
Moyenne