Improper Authentication Vulnerability Affects Admin and Site Enhancements (ASE)

CVE-2023-46630

What is CVE-2023-46630?

The Admin and Site Enhancements (ASE) plugin for WordPress contains an improper authentication vulnerability that allows unauthorized access to functionalities that are not properly constrained by Access Control Lists (ACLs). This issue potentially exposes sensitive areas and operations to users without the necessary permissions. Affected versions span from n/a through 5.7.1, necessitating immediate attention from site administrators to mitigate any potential risks.

References