WordPress security by component
Admin and Site Enhancements (ASE)
Plugin description
Admin and Site Enhancements (ASE) is a WordPress component with 6 published CVE records in this archive. The latest tracked vulnerability was published Mar 13, 2026; the highest CVE/CNA score is 7.5.
Plugin slug:
admin-site-enhancementsLatest vulnerability
CVE-2026-32423: Admin and Site Enhancements (ASE): A security weakness
Admin and Site Enhancements (ASE) is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
| Safe version |
|
||
|---|---|---|---|
| Mar 13, 2026 |
CVE-2026-32423
Admin and Site Enhancements (ASE): A security weakness
Admin and Site Enhancements (ASE) is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Dec 09, 2025 |
CVE-2025-64255
Admin and Site Enhancements (ASE): A security weakness
Admin and Site Enhancements (ASE) is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE2.7
NVDPending
|
| Feb 04, 2025 |
CVE-2025-24648
Admin and Site Enhancements (ASE): Privilege escalation or authentication bypass
Admin and Site Enhancements (ASE) is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE7.5
NVDPending
|
| Jan 24, 2025 |
CVE-2025-24649
Admin and Site Enhancements (ASE): A security weakness
Admin and Site Enhancements (ASE) is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Nov 12, 2024 |
CVE-2024-10790
Admin and Site Enhancements (ASE): Cross-site scripting
Admin and Site Enhancements (ASE) is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Jun 04, 2024 |
CVE-2023-46630
Admin and Site Enhancements (ASE): A security weakness
Admin and Site Enhancements (ASE) is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE7.5
NVDPending
|