Astra Wordpress Theme
Monthly
Content injection in Astra WordPress Theme 4.13.12 and earlier allows an authenticated WooCommerce Shop Manager to insert untrusted markup or script content into affected pages. The flaw is network-reachable and low-complexity but requires high privileges and an active WooCommerce installation, yielding only limited integrity impact with no confidentiality or availability loss; CVSS is 2.7. No public exploit identified at time of analysis, and it is not confirmed actively exploited (CISA KEV).
Content injection in Astra WordPress Theme 4.13.12 and earlier allows an authenticated WooCommerce Shop Manager to insert untrusted markup or script content into affected pages. The flaw is network-reachable and low-complexity but requires high privileges and an active WooCommerce installation, yielding only limited integrity impact with no confidentiality or availability loss; CVSS is 2.7. No public exploit identified at time of analysis, and it is not confirmed actively exploited (CISA KEV).