CVE-2024-13688: Wpase Admin And Site Enhancements

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offered via a crafted request

Affected products

• Wpase Admin And Site Enhancements: before 7.6.10 (fixed in 7.6.10)

Published 2025-04-28. Last modified 2026-06-17.