{"id":"CVE-2026-12083","published":"2026-07-06T06:00:02Z","modified":"2026-07-06T12:00:32Z","title":"Admin and Site Enhancements < 8.8.4 - Unauthenticated Administrator-Role Restoration via reset-for Parameter","vendor":null,"product":"Admin and Site Enhancements (ASE)","tier":"tail","description":{"text":"The Admin and Site Enhancements (ASE) WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin before 8.8.4 does not perform authentication, authorization, or nonce checks on a role-restoration request handler, allowing unauthenticated attackers to restore a previously demoted administrator account back to the administrator role. This is an incomplete fix of CVE-2024-43333 / CVE-2025-24648, which closed the issue for only one of the demotion paths the WordPress role API exposes.","provenance":"source","from":"CVE.org"},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.00468,"percentile":0.40411,"provenance":"source"},"cwes":[],"references":[{"url":"https://wpscan.com/vulnerability/a0c94f7f-6314-4ff2-bb92-ec02146975ff/","tags":["exploit","vdb-entry","technical-description"]}],"priority":{"score":18.8,"factors":[{"name":"EPSS percentile","points":8.08},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":5.67}]},"affectedVersions":[{"vendor":"Unknown","product":"Admin and Site Enhancements (ASE)","versions":[">= 7.6.3, < 8.8.4"]},{"vendor":"Unknown","product":"admin-site-enhancements-pro","versions":[">= 7.6.3, < 8.8.4"]}],"euvd":{"id":"EUVD-2026-41811","exploited":false,"provenance":"source"},"exploitRefs":["https://wpscan.com/vulnerability/a0c94f7f-6314-4ff2-bb92-ec02146975ff/"],"lineage":{"familyId":"fam-notfound-admin-and-site-enhancements-ase-cve-2024-43333","parents":[{"from":"CVE-2024-43333","to":"CVE-2026-12083","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"This is an incomplete fix of CVE-2024-43333 / CVE-2025-24648, which closed the issue for only one of the demotion paths the WordPress role API exposes.","from":"CVE.org","in":"CVE-2026-12083"}]},{"from":"CVE-2025-24648","to":"CVE-2026-12083","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"This is an incomplete fix of CVE-2024-43333 / CVE-2025-24648, which closed the issue for only one of the demotion paths the WordPress role API exposes.","from":"CVE.org","in":"CVE-2026-12083"}]}]}}