CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Improper Authentication vulnerability in wpase Admin and Site Enhancements (ASE) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Admin and Site Enhancements (ASE): from n/a through 5.7.1.
Explanation of Vulnerability in Simple Terms
Admin and Site Enhancements (ASE) for WordPress contains an authentication bypass vulnerability in versions up to 5.7.1. An attacker can read sensitive data without providing valid credentials. The vulnerability requires no user interaction and is exploitable over the network. Site administrators should update to a version newer than 5.7.1 immediately.
What an attacker can do
Read sensitive site data without logging in or providing valid credentials.
Potential impact on your site
Unauthorized users can access confidential information stored on your site without a valid account.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
