Admin and Site Enhancements (ASE) — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Admin and Site Enhancements (ASE), with AI-generated Chinese analysis, references, and POCs.

Vendor: wpase

CVE ID	Title	CVSS	Severity	Published
CVE-2026-19615	Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC	-	-	2026-08-20
CVE-2026-12083	Admin and Site Enhancements < 8.8.4 - Unauthenticated Administrator-Role Restoration via reset-for Parameter	-	-	2026-07-06
CVE-2026-32423	WordPress Admin and Site Enhancements (ASE) plugin <= 8.4.0 - Broken Access Control vulnerability CWE-862	5.4	Medium	2026-03-13
CVE-2025-64255	WordPress Admin and Site Enhancements (ASE) plugin <= 8.0.8 - Broken Access Control vulnerability CWE-862	2.7	Low	2025-12-09
CVE-2025-9487	Admin and Site Enhancements < 7.9.8 - Authenticated Stored XSS via SVG	5.4^AI	Medium ^AI	2025-09-22
CVE-2024-13688	Admin and Site Enhancements (ASE) < 7.6.10 - Password Protection Bypass	9.8^AI	Critical ^AI	2025-04-28
CVE-2024-13685	Admin and Site Enhancements (ASE) < 7.6.10 - Limit Login Attempt Bypass via IP Spoofing	7.5	-	2025-03-04
CVE-2025-24648	WordPress Admin and Site Enhancements (ASE) Plugin <= 7.6.2.1 - Privilege Escalation vulnerability CWE-266	7.5	High	2025-02-04
CVE-2025-24649	WordPress Admin and Site Enhancements (ASE) Plugin <= 7.6.2 - Broken Access Control vulnerability CWE-862	4.3	Medium	2025-01-24
CVE-2024-10790	Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG CWE-79	5.4	Medium	2024-11-12
CVE-2023-46630	WordPress Admin and Site Enhancements (ASE) plugin <= 5.7.1 - Password Protected View Bypass Vulnerability vulnerability CWE-287	7.5	High	2024-06-04

All 11 known CVE vulnerabilities affecting Admin and Site Enhancements (ASE) with full Chinese analysis, references, and POCs where available.