Admin and Site Enhancements (ASE) Pro
Information
| Software Type | Plugin |
|---|---|
| Software Slug | admin-site-enhancements-pro |
| Software Status | Active |
| Software Author | ASE |
| Software Website | www.wpase.com |
| Software Active Installs | 29,904 |
| Software Record Last Updated | April 28, 2025 |
5 Vulnerabilities
Researcher:
Nox Axter
Researcher:
Nguyen Ba Khanh
Researcher:
Revanth Hari Narayana Matte
Researcher:
Rafie Muhammad
Researcher:
Rafie Muhammad
| Title | Status | CVE ID | CVSS | Researchers | Date |
|---|---|---|---|---|---|
| Admin and Site Enhancements (ASE) Pro <= 8.9.0 - Unauthenticated Remote Code Execution via PHP Code Injection via cfgroup[input] Repeater Row Key | Patched | CVE-2026-16610 | Nox Axter | July 29, 2026 | |
| Admin and Site Enhancements (ASE) Pro <= 8.8.5 - Unauthenticated Stored Cross-Site Scripting | Patched | CVE-2026-57625 | Nguyen Ba Khanh | June 29, 2026 | |
| Admin and Site Enhancements <= 8.8.3 - Missing Authorization | Patched | CVE-2026-12083 | Revanth Hari Narayana Matte | June 26, 2026 | |
| Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation | Patched | CVE-2024-43333 | Rafie Muhammad | February 3, 2025 | |
| Admin and Site Enhancements (ASE) Pro <= 7.6.1.1 - Missing Authorization | Patched | CVE-2025-24653 | Rafie Muhammad | January 24, 2025 |
Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!
Learn moreWant to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.
The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.
Documentation