CVE-2025-64255 - WordPress Admin and Site Enhancements (ASE) plugin <= 8.0.8 - Broken Access Control vulnerability

Back Back to CVE browser

LOW

WordPress Admin and Site Enhancements (ASE) plugin <= 8.0.8 - Broken Access Control vulnerability

Published Dec 9, 2025

2.7

LOW

CVSS 3.1

EPSS 0.29%

Description

Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin and Site Enhancements (ASE): from n/a through <= 8.0.8.

Affected products

Vendor Bowo Product Admin and Site Enhancements (ASE) Default
unaffected
Affected
- ≥ 0, ≤ 8.0.8

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Bowo	Admin and Site Enhancements (ASE)	unaffected	Affected ≥ 0, ≤ 8.0.8

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-202150		Advisory
https://patchstack.com/database/Wordpress/Plugin/admin-site-enhancements/vulnerability/wordpress-admin-and-site-enhancements-ase-plugin-8-0-8-broken-access-control-vulnerability?_s_id=cve		vdb-entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Dec 9, 2025

Updated Apr 28, 2026

Reserved Oct 29, 2025

Link CVE-2025-64255

CISA Vulnrichment

Updated Dec 11, 2025

NVD

Status Deferred

Modified Oct 7, 2026

Link CVE-2025-64255

Red Hat

No data

ENISA EUVD

Assigner Patchstack

Published Dec 9, 2025

Updated Apr 28, 2026

Link EUVD-2025-202150

GitHub

No data