Beveiligingsadvies

CVE-2024-13685

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-04 06:00:04

Laatst bijgewerkt 2025-03-04 14:32:08

Toegewezen door WPScan

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate their value to bypass the login limit feature in the Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10.

← Alle CVE's bekijken Bekijk op cve.org ↗