Unrated severityNVD Advisory· Published Apr 28, 2025· Updated Aug 27, 2025

Admin and Site Enhancements (ASE) < 7.6.10 - Password Protection Bypass

CVE-2024-13688

Description

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offered via a crafted request

Affected products

WordPress/Admin And Site Enhancementsinferred
Range: <7.6.10
Package: https://wordpress.org/plugins/admin-and-site-enhancements
Admin and Site Enhancements/Admin and Site Enhancements (ASE)llm-create
Range: <=7.6.10

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

wpscan.com/vulnerability/19051d08-16b0-466c-976b-be7b076e8e92/mitreexploitvdb-entrytechnical-description

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000