CVE Database /
CVE-2025-13065
CVE · High
CVE-2025-13065 — Starter Templates – AI-Powered Templates for Elementor & Gutenberg [astra-sites] < 4.4.42
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-13065
|
Starter Templates – AI-Powered Templates for Elementor & Gutenberg [astra-sites] < 4.4.42 |
Unrestricted Upload of File with Dangerous Type |
High
8.8
|
< 4.4.42
|
4.4.42 |
2025-12-05 |
—
|
CVE-2025-13065
The Starter Templates plugin for WordPress is susceptible to arbitrary file uploads in all versions from 1.0 through 4.4.41 due to inadequate validation of file types, particularly with WXR files that can be exploited by attackers with author-level permissions or higher. This vulnerability could allow such users to upload malicious files, potentially leading to remote code execution on the affected site.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings