Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-32423 EUVD-2026-11951

WordPress Admin and Site Enhancements (ASE) plugin <= 8.4.0 - Broken Access Control vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Bowo Product: Admin and Site Enhancements (ASE)

Description

Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin and Site Enhancements (ASE): from n/a through <= 8.4.0.

Affected products

VendorProductAffectedFixed
Bowo Admin and Site Enhancements (ASE) ≤ 8.4.0 —

References