Medium severity5.3NVD Advisory· Published Mar 4, 2025· Updated Jun 17, 2026

CVE-2024-13685

Description

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Admin Site Enhancementsinferred
Range: <7.6.10
Package: https://wordpress.org/plugins/admin-site-enhancements
WordPress/Admin And Site Enhancementsllm-fuzzy
Range: <7.6.10
Package: https://wordpress.org/plugins/admin-and-site-enhancements

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/72c61904-253d-42d1-9edd-7ea2162a2f85/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000