← Back

CVE-2024-13685

nvd nist
Published: Mar 4, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10.

Affected (2)

Wpase
1 product
Admin And Site Enhancements
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Wpase
Admin And Site Enhancements
Before 7.6.10
Admin And Site Enhancements
Before 7.6.10

Related CWEs

CWE-290
Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (1)

Source: contact@wpscan.com
ExploitThird Party Advisory

Timeline

No history available yet.