ASE vulnerabilities
We track 1 vulnerability in ASE products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 30, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest ASE vulnerabilities
- 9.8 Critical severity
Admin and Site Enhancements (ASE) Pro: Unrestricted Upload of File with Dangerous Type
The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.9.0 via the recursive_html function. This is due to the frontend save handler enforces only a publicly emitted nonce w