WordPress plugin
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 12 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium10
- Low0
All Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤4.7.7Update to 4.7.8 | CVE-2026-39721 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤4.7.7Update to 4.7.8 | CVE-2026-102393 | |
| Medium4.3 | Authenticated (Contributor+) Insecure Direct Object Reference ≤4.7.5Update to 4.7.6 | CVE-2026-62134 | |
| High8.8 | Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass ≤4.4.41Update to 4.4.42 | CVE-2025-13065 | |
| Medium4.3 | Cross-Site Request Forgery ≤4.4.9Update to 4.4.10 | CVE-2025-24568 | |
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting ≤4.4.0Update to 4.4.1 | CVE-2024-47345 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤4.2.1Update to 4.2.2 | CVE-2024-4630 | |
| Medium4.3 | Authenticated (Contributor+) Server-Side Request Forgery ≤4.1.6Update to 4.1.7 | CVE-2024-1467 | |
| Medium6.4 | Authenticated (Contributor+) Server-Side Request Forgery ≤3.2.4Update to 3.2.5 | CVE-2023-41804 | |
| Medium4.3 | Incorrect Authorization ≤3.2.5Update to 3.2.6 | CVE-2023-41805 | |
| Medium4.3 | Cross-Site Request Forgery in add_to_favorite ≤3.1.20Update to 3.2.21 | CVE-2022-46851 | |
| High7.6 | Missing Authorization to Stored Cross-Site Scripting ≤2.7.0Update to 2.7.1 | CVE-2021-42360 |
- Medium4.3Missing Authorization
≤4.7.7Update to 4.7.8
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.7.7Update to 4.7.8
- Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
≤4.7.5Update to 4.7.6
- High8.8Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass
≤4.4.41Update to 4.4.42
- Medium4.3Cross-Site Request Forgery
≤4.4.9Update to 4.4.10
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤4.4.0Update to 4.4.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.2.1Update to 4.2.2
- Medium4.3Authenticated (Contributor+) Server-Side Request Forgery
≤4.1.6Update to 4.1.7
- Medium6.4Authenticated (Contributor+) Server-Side Request Forgery
≤3.2.4Update to 3.2.5
- Medium4.3Incorrect Authorization
≤3.2.5Update to 3.2.6
- Medium4.3Cross-Site Request Forgery in add_to_favorite
≤3.1.20Update to 3.2.21
- High7.6Missing Authorization to Stored Cross-Site Scripting
≤2.7.0Update to 2.7.1
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg: common questions
Does Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg have known vulnerabilities?
Yes. VulnCrest Radar lists 12 known vulnerabilities in Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg: 2 high, 10 medium. None are known to affect version null.
How do I check which version of Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg vulnerability?
CVE-2026-39721, published Oct 5, 2026: Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg <= 4.7.7 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg vulnerability listed in CISA KEV?
No. None of the known Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg vulnerabilities is currently listed in the CISA KEV catalog.