Every CVE whose affected-product data names Brainstormforce Astra, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2023-49830 — CVSS 9.9 (critical): Improper Control of Generation of Code ('Code Injection') vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from…
CVE-2021-24507 — CVSS 9.8 (critical): The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the…
CVE-2023-44148 — CVSS 5.4 (medium): Missing Authorization vulnerability in Brainstorm Force Astra Bulk Edit.This issue affects Astra Bulk Edit: from n/a through 1.2.7.