Bowo vulnerabilities

Products

• Admin And Site Enhancements (ase) 11
• System Dashboard 9
• Debug Log Manager 5
• Debug Log Manager 4
• Variable Inspector 2

Newest

• bowo admin and site enhancements (ase) Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC CVE-2026-19615 6.8 MediumAugust 20, 2026
• bowo admin and site enhancements (ase), unknown admin-site-enhancements-pro +1 more Admin and Site Enhancements < 8.8.4 - Unauthenticated Administrator-Role Restoration via reset-for Parameter CVE-2026-12083 8.1 HighJuly 6, 2026
• bowo admin and site enhancements (ase) WordPress Admin and Site Enhancements (ASE) plugin <= 8.4.0 - Broken Access Control vulnerability CVE-2026-32423 5.4 MediumMarch 13, 2026
• bowo admin and site enhancements (ase) WordPress Admin and Site Enhancements (ASE) plugin <= 8.0.8 - Broken Access Control vulnerability CVE-2025-64255 2.7 LowDecember 9, 2025
• bowo admin and site enhancements (ase) Admin and Site Enhancements < 7.9.8 - Authenticated Stored XSS via SVG CVE-2025-9487 4.7 MediumSeptember 22, 2025
• bowo admin and site enhancements (ase), wpase admin and site enhancements +1 more Admin and Site Enhancements (ASE) < 7.6.10 - Password Protection Bypass CVE-2024-13688 5.3 MediumApril 28, 2025
• bowo debug log manager WordPress Debug Log Manager plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-32613 7.1 HighApril 17, 2025
• bowo variable inspector WordPress Variable Inspector plugin <= 2.6.3 - Broken Access Control vulnerability CVE-2025-32229 4.3 MediumApril 4, 2025
• bowo admin and site enhancements (ase), wpase admin and site enhancements +1 more Admin and Site Enhancements (ASE) < 7.6.10 - Limit Login Attempt Bypass via IP Spoofing CVE-2024-13685 5.3 MediumMarch 4, 2025
• bowo variable inspector WordPress Variable Inspector plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-26914 7.1 HighMarch 3, 2025
• bowo system dashboard WordPress System Dashboard plugin <= 2.8.18 - Sensitive Data Exposure vulnerability CVE-2025-26911 4.3 MediumFebruary 25, 2025
• bowo admin and site enhancements (ase) WordPress Admin and Site Enhancements (ASE) Plugin <= 7.6.2.1 - Privilege Escalation vulnerability CVE-2025-24648 7.5 HighFebruary 4, 2025
• bowo system dashboard System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter CVE-2024-12299 6.1 MediumJanuary 30, 2025
• bowo admin and site enhancements (ase) WordPress Admin and Site Enhancements (ASE) Plugin <= 7.6.2 - Broken Access Control vulnerability CVE-2025-24649 4.3 MediumJanuary 24, 2025
• bowo system dashboard System Dashboard < 2.8.15 - Unauthenticated Stored XSS CVE-2024-11107 6.1 MediumDecember 10, 2024
• bowo system dashboard System Dashboard < 2.8.15 - Admin+ Path Traversal CVE-2024-10708 4.9 MediumDecember 10, 2024
• bowo admin and site enhancements (ase) Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG CVE-2024-10790 5.4 MediumNovember 12, 2024
• bowo code explorer Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading CVE-2023-5816 4.9 MediumOctober 30, 2024
• bowo debug log manager WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability CVE-2024-35669 4.3 MediumJune 9, 2024
• bowo admin and site enhancements (ase) WordPress Admin and Site Enhancements (ASE) plugin <= 5.7.1 - Password Protected View Bypass Vulnerability vulnerability CVE-2023-46630 7.5 HighJune 4, 2024
• bowo debug log manager WordPress Debug Log Manager plugin <= 2.3.1 - Broken Access Control vulnerability CVE-2024-33915 4.3 MediumMay 3, 2024
• bowo debug log manager WordPress Debug Log Manager plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-32582 7.1 HighApril 18, 2024
• bowo system dashboard System Dashboard < 2.8.10 - XSS via Header Injection CVE-2023-7246 5.4 MediumMarch 20, 2024
• bowo debug log manager Debug Log Manager < 2.3.0 - Sensitive Logs Exposure CVE-2023-6383 7.5 HighJanuary 8, 2024
• bowo system dashboard System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value) CVE-2023-5713 4.3 MediumDecember 7, 2023
• bowo system dashboard System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants) CVE-2023-5710 4.3 MediumDecember 7, 2023
• bowo system dashboard System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs) CVE-2023-5714 4.3 MediumDecember 7, 2023
• bowo system dashboard System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value) CVE-2023-5712 4.3 MediumDecember 7, 2023
• bowo system dashboard System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info) CVE-2023-5711 4.3 MediumDecember 7, 2023
• bowo debug log manager WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure CVE-2023-6136 5.3 MediumNovember 30, 2023
• bowo debug log manager, qriouslad debug log manager – conveniently monitor and inspect errors +1 more Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery CVE-2023-5772 4.3 MediumNovember 30, 2023