WordPress Astra Vulnerabilities

Wordpress Astra vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

13 March 2026

Cross-site Scripting Vulnerability in Astra Bulk Edit by Brainstorm Force
CVE-2026-32431
WordPressAstra Bulk Edit6.5MEDIUM

11 March 2026

Stored Cross-Site Scripting in Astra Theme for WordPress
CVE-2026-3534
WordPressAstra6.4MEDIUM

24 December 2025

Cross-site Scripting Vulnerability in Astra Widgets by Brainstorm Force
CVE-2025-68497
WordPressAstra Widgets5.4MEDIUM

11 November 2025

Arbitrary File Upload Vulnerability in Astra Security Suite Plugin for WordPress
CVE-2025-11521
WordPressAstra Security Suite –...8.1HIGH

7 January 2025

Stored XSS Vulnerability in Brainstorm Force Astra Widgets
CVE-2024-56274
WordPressAstra Widgets5.4MEDIUM

28 October 2024

Cross-site Scripting Vulnerability in Astra Widgets by Brainstorm Force
CVE-2024-50439
WordPressAstra Widgets5.4MEDIUM

19 June 2024

Missing Authorization Vulnerability Affects Astra Bulk Edit
CVE-2023-44148
WordPressAstra Bulk Edit8.8HIGH

9 April 2024

Stored Cross-Site Scripting Vulnerability in Astra Theme Affects All Versions Up to 4.6.8
CVE-2024-2347
WordPressAstra6.4MEDIUM

27 March 2024

Cross-site Scripting (XSS) Vulnerability in Astra
CVE-2024-29768
WordPressAstra5.9MEDIUM

29 December 2023

WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)
CVE-2023-49830
WordPressAstra Pro9.9CRITICAL

9 August 2021

Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection
CVE-2021-24507
WordpressAstra Pro Addon👾🟡EPSS 44%9.8CRITICAL