WordPress security by component

Astra Security Suite – Firewall & Malware Scan

Plugin description

Astra Security Suite – Firewall & Malware Scan is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Nov 11, 2025; the highest CVE/CNA score is 8.1.

Plugin slug: getastra

Latest vulnerability

CVE-2025-11521: Astra Security Suite – Firewall & Malware Scan: Dangerous file upload

Astra Security Suite – Firewall & Malware Scan is affected by dangerous file upload. The vulnerable path is reachable without authentication. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedNov 11, 2025

Safe version guidanceSee mitigation notes

		Safe version
Nov 11, 2025	CVE-2025-11521 Astra Security Suite – Firewall & Malware Scan: Dangerous file upload Astra Security Suite – Firewall & Malware Scan is affected by dangerous file upload. The vulnerable path is reachable without authentication. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE8.1 NVDPending
Apr 01, 2025	CVE-2025-31774 Astra Security Suite: A security weakness Astra Security Suite is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending