Home

Description

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offered via a crafted request

PUBLISHED Reserved 2025-01-23 | Published 2025-04-28 | Updated 2025-08-27 | Assigner WPScan

Problem types

CWE-259 Use of Hard-coded Password

Product status

Default status
unaffected

Any version before 7.6.10
affected

Credits

Dogus Demirkiran finder

WPScan coordinator

References

wpscan.com/...rability/19051d08-16b0-466c-976b-be7b076e8e92/ exploit vdb-entry technical-description

cve.org (CVE-2024-13688)

nvd.nist.gov (CVE-2024-13688)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.