CVE-2023-46630: WordPress Admin and Site Enhancements (ASE) plugin <= 5.7.1 - Password Protected View Bypass Vulnerability vulnerability
Published Jun 4, 2024
·Updated
Improper Authentication vulnerability in wpase Admin and Site Enhancements (ASE) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Admin and Site Enhancements (ASE): from n/a through 5.7.1.
Affected Software
1 affected component
WordPress Admin and Site Enhancements (ASE)<=5.7.1
Remediation
Information
Update to 5.8.0 or a higher version.
Event History
Jun 4, 2024
CVE Published
via MITRE·09:29 AM
Data Sourced
via MITRE·09:29 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-46630?
CVE-2023-46630 has a high severity rating due to its potential to bypass access controls.
2
How do I fix CVE-2023-46630?
To fix CVE-2023-46630, upgrade the Admin and Site Enhancements (ASE) plugin to version 5.7.2 or later.
3
Who is affected by CVE-2023-46630?
CVE-2023-46630 affects users of the Admin and Site Enhancements (ASE) plugin for WordPress versions up to 5.7.1.
4
What kind of vulnerability is CVE-2023-46630?
CVE-2023-46630 is classified as an improper authentication vulnerability.
5
Can CVE-2023-46630 lead to unauthorized access?
Yes, CVE-2023-46630 can potentially allow unauthorized access to functionalities not properly constrained by ACLs.