CVE-2026-39721

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-05

Last updated on: 2026-10-06

Assigner: Patchstack

Description

Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-05

Last Modified

2026-10-06

Generated

2026-10-19

AI Q&A

2026-10-05

EPSS Evaluated

2026-10-18

NVD

CVE-2026-39721

EUVD

EUVD-2026-92332

Affected Vendors & Products

Vendor	Product	Version / Range
Brainstorm	Force	Starter Templates 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is a Missing Authorization issue in the Brainstorm Force Starter Templates plugin (astra-sites). It allows attackers to exploit incorrectly configured access control security levels. The flaw exists in versions up to 4.7.7 and enables unauthorized access to restricted pages or actions.

Detection Guidance

To detect this vulnerability, check the installed version of the Starter Templates plugin. If it is version 4.7.7 or earlier, the system is vulnerable. Use commands like 'wp plugin list' in WordPress or inspect the plugin files for version details.

Impact Analysis

An attacker could view other users' data or perform actions they shouldn't be able to. This could lead to data leaks, unauthorized changes, or other security breaches depending on the plugin's usage.

Compliance Impact

This vulnerability could potentially lead to unauthorized access to user data, which may violate compliance requirements under GDPR and HIPAA if sensitive information is exposed. Unauthorized data access risks non-compliance with data protection regulations.

Mitigation Strategies

Immediately update the Starter Templates plugin to version 4.7.8 or later. If updating is not possible, disable the plugin temporarily or seek assistance from your hosting provider or developer to apply the patch.

Hi! I’m here to help you understand CVE-2026-39721. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70