Product by Brainstorm Force

    Astra

    5 known vulnerabilities in Astra (Brainstorm Force), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Astra (Brainstorm Force)
    CriticalCVE-2021-24507

    Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection

    		9.8
    CriticalCVE-2023-49830

    WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)

    also in 1 other product

    		9.9
    MediumCVE-2026-3534

    Astra <= 4.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta

    		6.4
    MediumCVE-2024-2347

    Astra <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name

    		6.4
    HighCVE-2023-44148

    WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability

    also in 1 other product

    		5.4

    All products by Brainstorm Force