Privilege Escalation in NotFound Admin and Site Enhancements by PatchStack
CVE-2024-43333

7.5HIGH

Key Information:

Vendor
WordPress
Status
Admin And Site Enhancements (ase) Pro
Vendor
CVE Published:
3 February 2025

Summary

An Incorrect Privilege Assignment vulnerability in the NotFound Admin and Site Enhancements (ASE) Pro plugin allows for privilege escalation. This flaw enables unauthorized users to gain elevated permissions, potentially compromising site security. The vulnerability affects NotFound Admin and Site Enhancements (ASE) Pro from its initial release up to version 7.6.2.1, posing risks for WordPress administrators who rely on this plugin for site enhancements and management.

Affected Version(s)

Admin and Site Enhancements (ASE) Pro <= 7.6.2.1

References

https://patchstack.com/database/wordpress/plugin/admin-si...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafie Muhammad (Patchstack)
.