Critical · 9.9 CVE-2023-49830 EUVD-2023-53738GHSA-7v8c-cpfm-gx98

WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)

Published Dec 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Brainstorm Force Product: Astra Pro

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1.

Affected products

Vendor	Product	Affected	Fixed
Brainstorm Force	Astra Pro	≤ 4.3.1	—

References

https://patchstack.com/database/vulnerability/astra-addon/wordpress-astra-pro-plugin-4-3-1-contributor-remote-code-execution-rce-vulnerability?_s_id=cve vdb-entry