5.3
Moyenne
CVE-2024-13688 The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password…
Description
The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offered via a crafted request
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Admin and Site Enhancements (ASE) 7.6 | premières → < 7.6.10 | 7.6.10 |
Autres CVE de Admin and Site Enhancements (ASE)
Les 5 CVE de Admin and Site Enhancements (ASE) →
CVE-2026-19615
The Admin and Site Enhancements (ASE) WordPress plugin before 9.0.1 does not sanitise uploaded SVG files on every…
6.8
Moyenne
CVE-2026-12083
The Admin and Site Enhancements (ASE) WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before…
8.1
Élevée
CVE-2025-9487
The Admin and Site Enhancements (ASE) WordPress plugin before 7.9.8 does not sanitise SVG files when uploaded via…
4.7
Moyenne
CVE-2024-13685
The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially…
5.3
Moyenne