Admin and Site Enhancements (ASE)

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Admin and Site Enhancements (ASE)

Information

Software Type Plugin
Software Slug admin-site-enhancements (view on wordpress.org)
Software Status Active
Software Author qriouslad
Software Website www.wpase.com
Software Downloads 10,176,690
Software Active Installs 200,000
Software Record Last Updated July 21, 2026

10 Vulnerabilities

Submit a Vulnerability
Admin and Site Enhancements (ASE) <= 8.4.0 - Missing Authorization
4.3
CVE-2026-32423
Feb 27, 2026
Researcher: Jakub Herman
Admin and Site Enhancements (ASE) <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation
8.8
CVE-2025-24648
Jan 20, 2026
Researcher: Rafie Muhammad
Admin and Site Enhancements (ASE) <= 8.0.8 - Missing Authorization
4.3
CVE-2025-64255
Dec 15, 2025
Researcher: daroo
Admin and Site Enhancements <= 7.9.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
5.4
CVE-2025-9487
Sep 1, 2025
Researcher: NGUYEN HOANG DUY
Admin and Site Enhancements (ASE) <= 7.6.9 - Password Protection Bypass
5.3
CVE-2024-13688
Apr 7, 2025
Researcher: Dogus Demirkiran
Admin and Site Enhancements (ASE) <= 7.6.9 - IP Spoofing to Limit Login Attempt Bypass
5.3
CVE-2024-13685
Feb 11, 2025
Researcher: Dogus Demirkiran
Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation
7.5
CVE-2024-43333
Feb 3, 2025
Researcher: Rafie Muhammad
Admin and Site Enhancements (ASE) <= 7.6.2 - Missing Authorization
3.1
CVE-2025-24649
Jan 24, 2025
Researcher: Rafie Muhammad
Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG
5.4
CVE-2024-10790
Nov 11, 2024
Researcher: Francesco Carlucci
Admin and Site Enhancements (ASE) <= 5.7.1 - Password Protection Mode Security Feature Bypass
7.5
CVE-2023-46630
Oct 25, 2023
Researcher: Abu Hurayra (HurayraIIT)
Title Status CVE ID CVSS Researchers Date
Admin and Site Enhancements (ASE) <= 8.4.0 - Missing Authorization Patched CVE-2026-32423 4.3 Jakub Herman February 27, 2026
Admin and Site Enhancements (ASE) <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation Patched CVE-2025-24648 8.8 Rafie Muhammad January 20, 2026
Admin and Site Enhancements (ASE) <= 8.0.8 - Missing Authorization Patched CVE-2025-64255 4.3 daroo December 15, 2025
Admin and Site Enhancements <= 7.9.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Patched CVE-2025-9487 5.4 NGUYEN HOANG DUY September 1, 2025
Admin and Site Enhancements (ASE) <= 7.6.9 - Password Protection Bypass Patched CVE-2024-13688 5.3 Dogus Demirkiran April 7, 2025
Admin and Site Enhancements (ASE) <= 7.6.9 - IP Spoofing to Limit Login Attempt Bypass Patched CVE-2024-13685 5.3 Dogus Demirkiran February 11, 2025
Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation Patched CVE-2024-43333 7.5 Rafie Muhammad February 3, 2025
Admin and Site Enhancements (ASE) <= 7.6.2 - Missing Authorization Patched CVE-2025-24649 3.1 Rafie Muhammad January 24, 2025
Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG Patched CVE-2024-10790 5.4 Francesco Carlucci November 11, 2024
Admin and Site Enhancements (ASE) <= 5.7.1 - Password Protection Mode Security Feature Bypass Patched CVE-2023-46630 7.5 Abu Hurayra (HurayraIIT) October 25, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation