Now officially on WordPress.org

CVE Database / CVE-2022-46851

CVE · Medium

CVE-2022-46851 — Starter Templates – AI-Powered Templates for Elementor & Gutenberg [astra-sites] < 3.1.21

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-46851 Starter Templates – AI-Powered Templates for Elementor & Gutenberg [astra-sites] < 3.1.21 Cross-Site Request Forgery (CSRF) Medium 4.3 < 3.1.21 3.1.21 2023-02-20 —

CVE-2022-46851

The Starter Templates plugin for WordPress contained a cross-site request forgery flaw affecting versions before 3.1.21 that could enable attackers to trick authenticated administrators into performing unintended actions on their accounts, such as changing passwords to gain unauthorized access. Muhammad Daffa identified and disclosed this vulnerability, which was resolved in version 3.1.21. Users should upgrade to version 3.1.21 or later to eliminate the risk.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings