Brainstormforce Astra vulnerabilities

• brainstormforce astra Astra <= 4.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta CVE-2026-3534 6.4 MediumMarch 11, 2026
• brainstorm force astra widgets WordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerability CVE-2024-56274 6.5 MediumJanuary 7, 2025
• brainstorm force astra widgets WordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerability CVE-2024-50439 6.5 MediumOctober 28, 2024
• brainstorm force astra bulk edit, brainstormforce astra +1 more WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability CVE-2023-44148 5.4 MediumJune 19, 2024
• brainstormforce astra Astra <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name CVE-2024-2347 6.4 MediumApril 9, 2024
• brainstorm force astra WordPress Astra theme <= 4.6.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-29768 5.9 MediumMarch 27, 2024
• brainstorm force astra pro, brainstormforce astra +1 more WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE) CVE-2023-49830 9.9 CriticalDecember 29, 2023
• brainstormforce astra, unknown astra pro addon +1 more Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection CVE-2021-24507 Public exploit EPSS 11.0% 9.8 CriticalAugust 9, 2021