Advisories · Technology
Admin and Site Enhancements (ASE) Pro.
Every CVE that names Admin and Site Enhancements (ASE) Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Admin and Site Enhancements (ASE) Pro <= 8.9.0 - Unauthenticated Remote Code Execution via PHP Code Injection via cfgroup[input] Repeater Row Key
- Admin and Site Enhancements (ASE) Pro
- Unrestricted file upload
- CVSS 9.6 CriticalCritical · CVSS 9+
WordPress Admin and Site Enhancements (ASE) Pro plugin <= 8.8.5 - Cross Site Scripting (XSS) vulnerability
- Admin and Site Enhancements (ASE) Pro
- Cross-site scripting (XSS)