PT-2025-5472 · Unknown · Admin/Site Enhancements

Rafie Muhammad · Published 2025-02-04 · Updated 2025-02-04 · CVE-2025-24648

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Admin and Site Enhancements (ASE) versions n/a through 7.6.2.1

Description The issue is related to an Incorrect Privilege Assignment, which allows Privilege Escalation. This means that users may gain higher access levels than intended, potentially leading to unauthorized actions.

Recommendations For versions n/a through 7.6.2.1, update to a version later than 7.6.2.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-24648

Affected Products

Admin/Site Enhancements

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-24648 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/admin-site-enhancements/vulnerability/wordpress-admin-and-site-enhancements-ase-plugin-7-6-1-1-privilege-escalation-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/admin-site-enhancements/vulnerability/wordpress-admin-and-site-enhancements-ase-plugin-7-6-1-1-privilege-escalation-vulnerability?_s_id=cve · Note
• https://t.me/cvedetector/17203 · Telegram Post
• https://twitter.com/CVEnew/status/1886789379634368811 · Twitter Post