Filtered by vendor Brainstormforce Subscriptions
Filtered by product Astra Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-49830 1 Brainstormforce 1 Astra 2024-11-21 9.9 Critical
Improper Control of Generation of Code ('Code Injection') vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1.
CVE-2023-44148 1 Brainstormforce 1 Astra 2024-11-21 5.4 Medium
Missing Authorization vulnerability in Brainstorm Force Astra Bulk Edit.This issue affects Astra Bulk Edit: from n/a through 1.2.7.
CVE-2021-24507 1 Brainstormforce 1 Astra 2024-11-21 9.8 Critical
The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and astra_shop_pagination_infinite AJAX action (available to both unauthenticated and authenticated user) before using them in SQL statement, leading to an SQL Injection issues