Admin And Site Enhancements

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wpase:admin_and_site_enhancements:*:*:*:*:free:wordpress:*:*

part: a version: * update: *

VendorWpase (33bf1b1c-ca9a-5fce-a572-d18a2f126c4a)
ProductAdmin And Site Enhancements (ff0e130e-daf0-5eac-a3f3-32c128c32a8d)
Edition*
Language*
Software editionfree
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-13688 vulnerable 2026-06-08 06:25:38.220932 Admin and Site Enhancements (ASE) < 7.6.10 - Password Protection Bypass
The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offered via a crafted request
Published: 2025-04-28T06:00:01.714Z
Updated: 2025-08-27T12:00:43.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13685 vulnerable 2026-06-08 06:25:38.214977 Admin and Site Enhancements (ASE) < 7.6.10 - Limit Login Attempt Bypass via IP Spoofing
The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10.
Published: 2025-03-04T06:00:04.054Z
Updated: 2025-03-04T14:32:08.168Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.