Login Request a demo
AS
Product
Astra
by brainstormforce · last CVE Mar 11, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Astra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-24507
9.8
11%
Aug 9
The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and…
Affected: before 3.5.2
CVE-2023-44148
8.8
0%
Jun 19
WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability
Affected: before 1.2.8
CVE-2023-49830
8.8
1%
Dec 29
WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)
Affected: through 4.3.1
CVE-2026-3534
6.4
0%
Mar 11
Astra <= 4.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
Affected: through 4.12.3
CVE-2024-2347
6.4
0%
Apr 9
Astra <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
Affected: through 4.6.8
Showing 5