ASE

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ASE records in CISA KEV

No ASE vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-13860 CVE-2026-16610 · GHSA-q4w9-fxpc-cjc5

Unrestricted file upload in ASE Admin and Site Enhancements Pro

MEDIUM 51

The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.9.0 via the recursive_html function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2026-07-30 No fix listed CWE-434

TI-2026-41451 CVE-2026-57625 · GHSA-r269-6x8w-gh3v

WordPress Admin and Site Enhancements (ASE) Pro plugin <= 8.8.5 - Cross Site Scripting (XSS) vulnerability

MEDIUM 42

Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhancements (ASE) Pro <= 8.8.5 versions.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0045 Published 2026-07-02 No fix listed CWE-79

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0