Privilege Escalation in Admin and Site Enhancements Plugin by wpase.com
CVE-2025-24648

7.5HIGH

Key Information:

Vendor

WordPress
Status
Admin And Site Enhancements (ase)
Vendor
CVE Published:
4 February 2025

What is CVE-2025-24648?

The Admin and Site Enhancements (ASE) plugin by wpase.com is susceptible to an incorrect privilege assignment issue that can lead to privilege escalation. This vulnerability affects all versions from n/a up to 7.6.2.1, enabling unauthorized users to gain elevated access within the WordPress environment. It is essential for users to review their installations and apply necessary security updates to mitigate risks related to this flaw.

Affected Version(s)

Admin and Site Enhancements (ASE) <= 7.6.2.1

References

https://patchstack.com/database/wordpress/plugin/admin-si...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafie Muhammad (Patchstack)
.
CVE-2025-24648 : Privilege Escalation in Admin and Site Enhancements Plugin by wpase.com