Plugin security history

Admin and Site Enhancements (ASE) Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 11 vulnerability records associated with Admin and Site Enhancements (ASE), published between 2023 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

11Total records

0Critical

3High

7Medium

1Low

0Informational

11Patched records

0Currently marked unpatched

2023-10-25First disclosure

2026-06-26Latest disclosure

11 of 11CVE coverage

Year-by-Year Timeline

Year	Records	Relative volume
2023	1	1 records
2024	1	1 records
2025	6	6 records
2026	3	3 records

Severity Breakdown

Severity	Records	Share
High	3	27.3%
Medium	7	63.6%
Low	1	9.1%

Vulnerability-Type Breakdown

Missing Authorization

3 records27.3%

First: 2025. Latest: 2026.

Privilege Escalation

3 records27.3%

First: 2025. Latest: 2026.

Authentication Bypass

2 records18.2%

First: 2023. Latest: 2025.

Cross-Site Scripting

2 records18.2%

First: 2024. Latest: 2025.

Other

1 record9.1%

First: 2025. Latest: 2025.

Patch Status

Patched: 11
Currently marked unpatched: 0
Unknown status: 0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

8.8.4
8.4.1
8.1.0
7.9.8
7.6.10
7.6.3
7.5.2
5.8.0

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected range	Vulnerability	Published	Patched version	Severity
`*-8.8.3`	Admin and Site Enhancements <= 8.8.3 - Missing Authorization	June 26, 2026	8.8.4	Medium
`*-8.4.0`	Admin and Site Enhancements (ASE) <= 8.4.0 - Missing Authorization	February 27, 2026	8.4.1	Medium
`*-7.6.2.1`	Admin and Site Enhancements (ASE) <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation	January 20, 2026	7.6.3	High
`*-8.0.8`	Admin and Site Enhancements (ASE) <= 8.0.8 - Missing Authorization	December 15, 2025	8.1.0	Medium
`*-7.9.7`	Admin and Site Enhancements <= 7.9.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG	September 1, 2025	7.9.8	Medium
`*-7.6.9`	Admin and Site Enhancements (ASE) <= 7.6.9 - Password Protection Bypass	April 7, 2025	7.6.10	Medium
`*-7.6.9`	Admin and Site Enhancements (ASE) <= 7.6.9 - IP Spoofing to Limit Login Attempt Bypass	February 11, 2025	7.6.10	Medium
`*-7.6.2.1`	Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation	February 3, 2025	7.6.3	High
`*-7.6.2`	Admin and Site Enhancements (ASE) <= 7.6.2 - Missing Authorization	January 24, 2025	7.6.3	Low
`*-7.5.1`	Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG	November 11, 2024	7.5.2	Medium
`*-5.7.1`	Admin and Site Enhancements (ASE) <= 5.7.1 - Password Protection Mode Security Feature Bypass	October 25, 2023	5.8.0	High

Selected source records

Latest Records

MediumCVE-2026-12083

Admin and Site Enhancements <= 8.8.3 - Missing Authorization

Published: June 26, 2026

Affected versions: *-8.8.3
Patched versions: 8.8.4

Affected versions: *-8.8.3
Patched versions: 8.8.4

Original Wordfence record

MediumCVE-2026-32423

Admin and Site Enhancements (ASE) <= 8.4.0 - Missing Authorization

Published: February 27, 2026

Affected versions: *-8.4.0
Patched versions: 8.4.1

Original Wordfence record

HighCVE-2025-24648

Admin and Site Enhancements (ASE) <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation

Published: January 20, 2026

Affected versions: *-7.6.2.1
Patched versions: 7.6.3

Original Wordfence record

MediumCVE-2025-64255

Admin and Site Enhancements (ASE) <= 8.0.8 - Missing Authorization

Published: December 15, 2025

Affected versions: *-8.0.8
Patched versions: 8.1.0

Original Wordfence record

MediumCVE-2025-9487

Admin and Site Enhancements <= 7.9.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

Published: September 1, 2025

Affected versions: *-7.9.7
Patched versions: 7.9.8

Original Wordfence record

MediumCVE-2024-13688

Admin and Site Enhancements (ASE) <= 7.6.9 - Password Protection Bypass

Published: April 7, 2025

Affected versions: *-7.6.9
Patched versions: 7.6.10

Original Wordfence record

MediumCVE-2024-13685

Admin and Site Enhancements (ASE) <= 7.6.9 - IP Spoofing to Limit Login Attempt Bypass

Published: February 11, 2025

Affected versions: *-7.6.9
Patched versions: 7.6.10

Original Wordfence record

HighCVE-2024-43333

Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation

Published: February 3, 2025

Affected versions: *-7.6.2.1
Patched versions: 7.6.3

Affected versions: *-7.6.2.1
Patched versions: 7.6.3

Original Wordfence record

Highest-Severity Records

HighCVE-2025-24648

Admin and Site Enhancements (ASE) <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation

Published: January 20, 2026

Affected versions: *-7.6.2.1
Patched versions: 7.6.3

Original Wordfence record

HighCVE-2023-46630

Admin and Site Enhancements (ASE) <= 5.7.1 - Password Protection Mode Security Feature Bypass

Published: October 25, 2023

Affected versions: *-5.7.1
Patched versions: 5.8.0

Original Wordfence record

HighCVE-2024-43333

Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation

Published: February 3, 2025

Affected versions: *-7.6.2.1
Patched versions: 7.6.3

Affected versions: *-7.6.2.1
Patched versions: 7.6.3

Original Wordfence record

MediumCVE-2024-10790

Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG

Published: November 11, 2024

Affected versions: *-7.5.1
Patched versions: 7.5.2

Original Wordfence record

MediumCVE-2025-9487

Admin and Site Enhancements <= 7.9.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG

Published: September 1, 2025

Affected versions: *-7.9.7
Patched versions: 7.9.8

Original Wordfence record

MediumCVE-2024-13688

Admin and Site Enhancements (ASE) <= 7.6.9 - Password Protection Bypass

Published: April 7, 2025

Affected versions: *-7.6.9
Patched versions: 7.6.10

Original Wordfence record

MediumCVE-2024-13685

Admin and Site Enhancements (ASE) <= 7.6.9 - IP Spoofing to Limit Login Attempt Bypass

Published: February 11, 2025

Affected versions: *-7.6.9
Patched versions: 7.6.10

Original Wordfence record

MediumCVE-2026-12083

Admin and Site Enhancements <= 8.8.3 - Missing Authorization

Published: June 26, 2026

Affected versions: *-8.8.3
Patched versions: 8.8.4

Affected versions: *-8.8.3
Patched versions: 8.8.4

Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware Removal WordPress Security Maintenance Contact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory