Admin and Site Enhancements (ASE) Pro < 7.6.3 - Subscriber+ Privilege Escalation

Description

The plugins are vulnerable to privilege escalation due to the plugin not properly restricting user's ability to utilize the “View Admin as Role” feature. This makes it possible for authenticated attackers, with Subscriber-level access and above, to recover access to a previous role, such as administrator, granted they had previously held a higher role. CVE-2025-24648 is a duplicate assignment of the same vulnerability.