astra-sites vulnerabilities

CVEs whose affected-version data names the astra-sites package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-62134Medium· 4.3

1w ago

WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References (IDOR) in Starter Templates <= 4.7.5 versions.

▾ SunlitBrainstorm Force · astra-sitesEPSS 0.15%via CVEORG