Security
فارسی
All products

astra-sites

WordPress · Plugin
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg <= 4.7.7 - Missing AuthorizationCVE-2026-39721 astra-sites WordPress Medium Fix reported
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg <= 4.7.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-102393 astra-sites WordPress Medium Fix reported
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg <= 4.7.5 - Authenticated (Contributor+) Insecure Direct Object ReferenceCVE-2026-62134 astra-sites WordPress Medium Fix reported
Starter Templates <= 4.4.41 - Authenticated (Author+) Arbitrary File Upload via WXR Upload BypassCVE-2025-13065 astra-sites WordPress High Fix reported
Starter Templates <= 4.4.9 - Cross-Site Request ForgeryCVE-2025-24568 astra-sites WordPress Medium Fix reported
Starter Templates <= 4.4.0 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-47345 astra-sites WordPress Medium Fix reported
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-4630 astra-sites WordPress Medium Fix reported
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side Request ForgeryCVE-2024-1467 astra-sites WordPress Medium Fix reported
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request ForgeryCVE-2023-41804 astra-pro-sitesastra-sites WordPress Medium Fix reported
Starter Templates <= 3.2.5 - Incorrect AuthorizationCVE-2023-41805 astra-pro-sitesastra-sites WordPress Medium Fix reported
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 - Missing Authorization to Stored Cross-Site ScriptingCVE-2021-42360 astra-sites WordPress High Fix reported
Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 3.1.20 - Cross-Site Request Forgery in add_to_favoriteCVE-2022-46851 astra-sites WordPress Medium Fix reported