CVE · Medium

CVE-2023-41805 — Starter Templates – AI-Powered Templates for Elementor & Gutenberg [astra-sites] < 3.2.6

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-41805 Starter Templates – AI-Powered Templates for Elementor & Gutenberg [astra-sites] < 3.2.6 Missing Authorization Medium 6.5 < 3.2.6 3.2.6 2023-09-05

CVE-2023-41805

The Starter Templates plugin for WordPress contained an access control flaw in versions prior to 3.2.6 that allowed unauthorized users to perform actions restricted to privileged accounts. The vulnerability stemmed from insufficient validation of user permissions and missing security tokens in certain functions. Users should upgrade to version 3.2.6 or later to remediate this issue.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.