Vulnerability in Astra — CVE-2026-27085

What to do now

Update Astra to 4.14.0 or later.

Affected versions

• Everything up to and including 4.13.12

Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions.

This description is reproduced verbatim from the public vulnerability record.

• https://patchstack.com/database/wordpress/theme/astra/vulnerability/wordpress-astra-wordpress-theme-theme-4-13-12-content-injection-vulnerability?_s_id=cve

This page is compiled automatically from public databases. Accuracy is not guaranteed; confirm against the vendor advisory before acting.