EUVD-2026-76203
GHSA-97m5-4qgr-7pg6
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Network-accessible with low complexity; PR:L confirmed by Contributor-account requirement; integrity-only impact with no confidentiality or availability breach.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
Lifecycle Timeline
3DescriptionCVE.org
Contributor Insecure Direct Object References (IDOR) in Starter Templates <= 4.7.5 versions.
AnalysisAI
Contributor-level Insecure Direct Object Reference (IDOR) in the Starter Templates WordPress plugin (≤4.7.5) permits authenticated low-privilege users to manipulate object identifiers in plugin requests, modifying resources outside their authorized scope. Reported by Patchstack with a CVSS 4.3, the flaw is bounded to integrity-only impact - no data disclosure or availability disruption applies. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an active WordPress Contributor-level account on the target installation - such accounts must be explicitly granted by a site administrator and are not available to unauthenticated users or the general public by default. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.3 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) is well-calibrated to the actual impact: network-reachable, low complexity, but gated behind a PR:L Contributor account and limited strictly to integrity modifications with zero confidentiality or availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update Starter Templates to the version released after 4.7.5; the exact patched release version is not independently confirmed in the available input data - consult the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/astra-sites/vulnerability/wordpress-starter-templates-plugin-4-7-5-insecure-direct-object-references-idor-vulnerability or the WordPress.org plugin changelog for the confirmed fix version. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Starter Templates
View allOn sites that also had the Elementor plugin for WordPress installed, it was possible for users with the edit_posts capab
Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates - Elementor, WordPress & Beaver B
The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions
Share
External POC / Exploit Code
Leaving vuln.today