Medium · 4.3 CVE-2025-24653 EUVD-2025-3850GHSA-4p3m-85w6-62v7

WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.1.1 - Broken Access Control vulnerability

Published Jan 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: NotFound Product: Admin and Site Enhancements (ASE) Pro

Description

Missing Authorization vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Admin and Site Enhancements (ASE) Pro: from n/a through 7.6.1.1.

Affected products

Vendor	Product	Affected	Fixed
NotFound	Admin and Site Enhancements (ASE) Pro	≤ 7.6.1.1	—

References

https://patchstack.com/database/wordpress/plugin/admin-site-enhancements-pro/vulnerability/wordpress-admin-and-site-enhancements-ase-pro-plugin-7-6-1-1-broken-access-control-vulnerability?_s_id=cve vdb-entry