CVE-2026-39721: WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Starter Templatesto a version that resolves this vulnerability.Fixed in 4.7.8
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability requires low-privileged access to the affected WordPress site. It is remotely exploitable and does not require user interaction.
Which installations are affected?
Brainstorm Force Starter Templates versions through 4.7.7 are affected. The available information does not specify whether any particular default configuration is required.
What impact can exploitation have?
Successful exploitation can affect integrity and availability. No confidentiality impact is identified in the provided severity vector.