NotFound Admin and Site Enhancements Pro Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the NotFound Admin and Site Enhancements (ASE) Pro plugin for WordPress, affecting versions through 7.6.2.1. This vulnerability allows users with low privileges to escalate their rights, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and potentially full control over the website.

Remediation

Users of the NotFound Admin and Site Enhancements (ASE) Pro plugin should update to version 7.6.3 or later. Patchstack users can enable auto-update for vulnerable plugins.