Plugin icon

Starter Templates – AI-Powered Templates for Elementor & Gutenberg

astra-sites

Vulnerabilities:

9

Last Updated:

February 4, 2026

Active Installs:

2000000

Published
Title
Fixed in
CVSS
Published
2025-12-05
Title
Starter Templates < 4.4.42 - Author+ Arbitrary File Upload via WXR Upload Bypass
Fixed in
Fixed in 4.4.42
CVSS
7.2 (high)
Published
2025-01-24
Title
Starter Templates < 4.4.10 - Cross-Site Request Forgery
Fixed in
Fixed in 4.4.10
CVSS
4.3 (medium)
Published
2024-09-27
Title
Starter Templates < 4.4.1 - Author+ Stored XSS
Fixed in
Fixed in 4.4.1
CVSS
4.8 (medium)
Published
2024-05-10
Title
Starter Templates — Elementor, WordPress & Beaver Builder Templates < 4.2.2 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.2.2
CVSS
6.4 (medium)
Published
2024-05-08
Title
Starter Templates — Elementor, WordPress & Beaver Builder Templates < 4.1.7 - Contributor+ Server-Side Request Forgery
Fixed in
Fixed in 4.1.7
CVSS
4.3 (medium)
Published
2023-09-05
Title
Starter Templates <= 3.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
Fixed in
Fixed in 3.2.5
CVSS
6.4 (medium)
Published
2023-09-05
Title
Starter Templates <= 3.2.5 - Incorrect Authorization
Fixed in
Fixed in 3.2.6
CVSS
4.3 (medium)
Published
2023-02-20
Title
Starter Templates <= 3.1.20 - Settings Update via CSRF
Fixed in
Fixed in 3.1.21
CVSS
4.3 (medium)
Published
2021-11-11
Title
Starter Templates < 2.7.1 - Contributor+ Block Import to Stored XSS
Fixed in
Fixed in 2.7.1
CVSS
7.6 (high)