Plugin icon

Admin and Site Enhancements (ASE)

admin-site-enhancements

Vulnerabilities:

8

Last Updated:

April 7, 2026

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2025-12-15
Title
Admin and Site Enhancements (ASE) < 8.1.0 - Missing Authorization
Fixed in
Fixed in 8.1.0
CVSS
4.3 (medium)
Published
2025-09-01
Title
Admin and Site Enhancements < 7.9.8 - Authenticated Stored XSS via SVG
Fixed in
Fixed in 7.9.8
CVSS
5.1 (medium)
Published
2025-04-07
Title
Admin and Site Enhancements (ASE) < 7.6.10 - Password Protection Bypass
Fixed in
Fixed in 7.6.10
CVSS
5.3 (medium)
Published
2025-02-11
Title
Admin and Site Enhancements (ASE) < 7.6.10 - Limit Login Attempt Bypass via IP Spoofing
Fixed in
Fixed in 7.6.10
CVSS
5.3 (medium)
Published
2025-02-03
Title
Admin and Site Enhancements (ASE) Pro < 7.6.3 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 7.6.3
CVSS
7.5 (high)
Published
2025-01-24
Title
Admin and Site Enhancements (ASE) < 7.6.3 - Missing Authorization
Fixed in
Fixed in 7.6.3
CVSS
3.1 (low)
Published
2024-11-11
Title
Admin and Site Enhancements (ASE) < 7.5.2 - Authenticated Stored Cross-Site Scripting via SVG
Fixed in
Fixed in 7.5.2
CVSS
5.4 (medium)
Published
2023-10-25
Title
Admin and Site Enhancements (ASE) < 5.8.0 - Password Protection Mode Security Feature Bypass
Fixed in
Fixed in 5.8.0
CVSS
7.5 (high)