What’s Vulnerable › Products

Admin and Site Enhancements (ASE) vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Admin and Site Enhancements (ASE) version is affected

Latest Admin and Site Enhancements (ASE) vulnerabilities

• CVE-2026-19615 — Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC (CVSS 6.8)
• CVE-2026-12083 — Admin and Site Enhancements < 8.8.4 - Unauthenticated Administrator-Role Restoration via reset-for Parameter (CVSS 8.1)
• CVE-2025-9487 — Admin and Site Enhancements < 7.9.8 - Authenticated Stored XSS via SVG (CVSS 4.7)
• CVE-2024-13688 — Admin and Site Enhancements (ASE) < 7.6.10 - Password Protection Bypass (CVSS 5.3)
• CVE-2024-13685 — Admin and Site Enhancements (ASE) < 7.6.10 - Limit Login Attempt Bypass via IP Spoofing (CVSS 5.3)