CVE-2024-13688

The Admin and Site Enhancements (ASE) WordPress plugin, in versions prior to 7.6.10 , contains a vulnerability where the Password Protection feature uses a hardcoded password . This flaw allows an attacker to bypass the intended protection by sending a crafted request . To remediate this, users s...

CVE-2024-13685

The Admin and Site Enhancements (ASE) WordPress plugin before version 7.6.10 is vulnerable to an Authentication Bypass by Spoofing (CWE-290). The root cause is the plugin's retrieval of client IP addresses from potentially untrusted headers, which allows an attacker to manipulate these values to ...