Medium · 4.7 CVE-2025-30859 EUVD-2025-8341GHSA-f92x-c56c-pf59

WordPress AliNext plugin <= 3.5.1 - Open Redirection vulnerability

Published Mar 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: guru-aliexpress Product: AliNext

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in guru-aliexpress AliNext ali2woo-lite allows Phishing.This issue affects AliNext: from n/a through <= 3.5.1.

Affected products

Vendor	Product	Affected	Fixed
guru-aliexpress	AliNext	≤ 3.5.1	—

References

https://patchstack.com/database/Wordpress/Plugin/ali2woo-lite/vulnerability/wordpress-alinext-plugin-3-5-1-open-redirection-vulnerability?_s_id=cve vdb-entry