Medium · 4.7 CVE-2025-28896 EUVD-2025-7855GHSA-wq5j-wjp2-4f74

WordPress AS English Admin plugin <= 1.0.0 - Open Redirection vulnerability

Published Mar 11, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Akshar Soft Solutions Product: AS English Admin

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Akshar Soft Solutions AS English Admin as-english-admin allows Phishing.This issue affects AS English Admin: from n/a through <= 1.0.0.

Affected products

Vendor	Product	Affected	Fixed
Akshar Soft Solutions	AS English Admin	≤ 1.0.0	—

References

https://patchstack.com/database/Wordpress/Plugin/as-english-admin/vulnerability/wordpress-as-english-admin-plugin-1-0-0-open-redirection-vulnerability?_s_id=cve vdb-entry