medium4.3

CVE-2025-24649

Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting Incorrectly Configured Access Control S…

Impact

Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin and Site Enhancements (ASE): from n/a through <= 7.6.2.

Affected products

Product	Affected versions
Admin And Site Enhancements (ASE): From N/A Through	through 7.6.2.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-862

References

NVD record
CVE.org record
https://patchstack.com/database/Wordpress/Plugin/admin-site-enhancements/vulnerability/wordpress-admin-and-site-enhancements-ase-plugin-7-6-2-broken-access-control-vulnerability?_s_id=cve