Vulnerabilities

TI-2025-13679 CVE-2025-14996 · GHSA-7fc4-wq7j-5wjr

AS Password Field In Default Registration Form <= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover

MEDIUM 49

The AS Password Field In Default Registration Form plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00369 Published 2026-01-06 No fix listed CWE-639

TI-2025-20839 CVE-2025-28896 · GHSA-wq5j-wjp2-4f74

WordPress AS English Admin plugin <= 1.0.0 - Open Redirection vulnerability

LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Akshar Soft Solutions AS English Admin as-english-admin allows Phishing.This issue affects AS English Admin: from n/a through <= 1.0.0.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00325 Published 2025-03-11 No fix listed CWE-601

Vulnerabilities

Filters

AS Password Field In Default Registration Form <= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover

WordPress AS English Admin plugin <= 1.0.0 - Open Redirection vulnerability