CVEvulnerability

CVE-2024-13685

5.3 MEDIUM Published 2025-03-04 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-03-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-290

Description

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10.

Affected configurations

• wpase admin and site enhancements (< 7.6.10)

Related

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References