Description

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offered via a crafted request

INFO

Published Date :

2025-04-28T06:00:01.714Z

Last Modified :

2025-08-27T12:00:43.055Z

Source :

WPScan
AFFECTED PRODUCTS

The following products are affected by CVE-2024-13688 vulnerability.

Vendors Products
Wpase
  • Admin And Site Enhancements
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-13688.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact