Missing Authorization vulnerability in Brainstorm Force Astra Bulk Edit.This issue affects Astra Bulk Edit: from n/a through 1.2.7.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:LBrainstormforce Astra
APPBrainstormforce< 1.2.8
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2023-49830CRITICAL9.9PL ✓ten sam produkt
RCE w Astra Pro – code injection dostępny dla zalogowanych użytkowników
CVE-2021-24507CRITICAL9.8ten sam produkt
The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST paramet...
CVE-2025-6691HIGH8.1ten sam vendor
The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file ...
CVE-2025-6742HIGH7.5ten sam vendor
The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Inje...
CVE-2024-37455HIGH8.8ten sam vendor
Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege...