BaseFortify

Publication date: 2025-11-11

Last updated on: 2025-11-12

Assigner: Wordfence

Description

The Astra Security Suite – Firewall & Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient validation of remote URLs for zip downloads and an easily guessable key in all versions up to, and including, 0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-11

Last Modified

2025-11-12

Generated

2026-07-06

AI Q&A

2025-11-11

EPSS Evaluated

2026-07-05

NVD

CVE-2025-11521

Affected Vendors & Products

Vendor	Product	Version / Range
wordpress	wordpress	*
webprotect.ai	astra_security_suite	*
webprotect.ai	astra_security_suite	0.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

The vulnerability in the Astra Security Suite – Firewall & Malware Scan plugin for WordPress allows unauthenticated attackers to upload arbitrary files to the affected site's server. This happens because the plugin does not properly validate remote URLs for zip downloads and uses an easily guessable key in all versions up to 0.2. This flaw can potentially enable remote code execution on the server.

Impact Analysis

This vulnerability can allow attackers to upload malicious files to your server without authentication, which may lead to remote code execution. This can compromise the security and integrity of your website, potentially resulting in data breaches, defacement, or full server takeover.

Hi! I’m here to help you understand CVE-2025-11521. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70