Admin and Site Enhancements WordPress Plugin Limit Login Attempt Bypass Vulnerability

A vulnerability in the Admin and Site Enhancements (ASE) WordPress plugin, affecting versions prior to 7.6.10, allows attackers to bypass the login limit feature. This is achieved by manipulating client IP addresses through untrusted headers, enabling the exploitation of the login limit functionality.

Impact

Exploitation of this vulnerability allows for bypassing the login limit feature, potentially leading to brute force attacks.

Remediation

Users can update to Admin and Site Enhancements WordPress plugin version 7.6.10 or later to address this vulnerability.