Admin and Site Enhancements (ASE) Pro (<= 8.9.0)

The ASE Pro WordPress plugin up to version 8.9.0 is vulnerable to unauthenticated remote code execution via insecure input handling in the recursive_html function.