CVE-2026-27085

The Astra WordPress Theme versions up to 4.13.12 are vulnerable to a content injection flaw affecting shop manager roles, allowing unauthorized users to manipulate content. This vulnerability could lead to the display of malicious content on e-commerce sites, potentially impacting user trust and site integrity. WordPress site administrators using the Astra theme should prioritize updating to the latest version to mitigate this risk.