WordPress plugin
Admin and Site Enhancements (ASE) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 12 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium8
- Low1
All Admin and Site Enhancements (ASE) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) Privilege Escalation ≤7.6.2.1Update to 7.6.3 | CVE-2025-24648 | |
| High7.5 | Authenticated (Subscriber+) Privilege Escalation ≤7.6.2.1Update to 7.6.3 | CVE-2024-43333 | |
| High7.5 | Password Protection Mode Security Feature Bypass ≤5.7.1Update to 5.8.0 | CVE-2023-46630 |
- High8.8Authenticated (Subscriber+) Privilege Escalation
≤7.6.2.1Update to 7.6.3
- High7.5Authenticated (Subscriber+) Privilege Escalation
≤7.6.2.1Update to 7.6.3
- High7.5Password Protection Mode Security Feature Bypass
≤5.7.1Update to 5.8.0
Admin and Site Enhancements (ASE): common questions
Does Admin and Site Enhancements (ASE) have known vulnerabilities?
Yes. VulnCrest Radar lists 12 known vulnerabilities in Admin and Site Enhancements (ASE): 3 high, 8 medium, 1 low. None are known to affect version null.
How do I check which version of Admin and Site Enhancements (ASE) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Admin and Site Enhancements (ASE) vulnerability?
CVE-2026-19615, published Aug 21, 2026: Admin and Site Enhancements (ASE) < 9.0.1 - Authenticated (Author+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Admin and Site Enhancements (ASE) vulnerability listed in CISA KEV?
No. None of the known Admin and Site Enhancements (ASE) vulnerabilities is currently listed in the CISA KEV catalog.