CVE-2023-46630
Last modified
CVE-2023-46630 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Improper Authentication vulnerability in wpase Admin and Site Enhancements (ASE) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Admin and Site Enhancements (ASE): from n/a through 5.7.1.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.
Description
Improper Authentication vulnerability in wpase Admin and Site Enhancements (ASE) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Admin and Site Enhancements (ASE): from n/a through 5.7.1.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2023-46630?
How severe is CVE-2023-46630?
How do I fix CVE-2023-46630?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-46625Cross-Site Request Forgery (CSRF) vulnerability in DAEXT Aut…8.8
- CVE-2023-46626Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
- CVE-2023-46627Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
- CVE-2023-46628Missing Authorization vulnerability in RedLettuce Plugins WP…4.3
- CVE-2023-46629Cross-Site Request Forgery (CSRF) vulnerability in themeloca…8.8
- CVE-2023-4663Improper Neutralization of Script-Related HTML Tags in a Web…6.1
- CVE-2023-46631Missing Authorization vulnerability in RevenueHunt Product R…6.5
- CVE-2023-46632Missing Authorization vulnerability in David Cramer My Short…7.1
- CVE-2023-46633Missing Authorization vulnerability in TCBarrett Glossary al…5.4
- CVE-2023-46634Cross-Site Request Forgery (CSRF) vulnerability in phoeniixx…6.1
- CVE-2023-46635Missing Authorization vulnerability in YITHEMES YITH WooComm…5.3
- CVE-2023-46636Cross-Site Request Forgery (CSRF) vulnerability in David Stö…8.8
Are you affected by CVE-2023-46630?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST