CVE-2025-24648

Summary

CVE-2025-24648 is a Privilege Escalation vulnerability affecting the Admin and Site Enhancements (ASE) plugin used in wpase.com. The flaw, specifically an Incorrect Privilege Assignment issue, has been identified in ASE versions from n/a through 7.6.2.1. This vulnerability allows attackers to escalate their privileges, potentially gaining unauthorized access and control within the affected WordPress instances. Immediate updates to the latest version of ASE are recommended to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.