PT-2025-46248 · WordPress · Astra Security Suite – Firewall & Malware Scan

Kenneth Dunn · Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-11521

Positive Technologies · (AI Summary)

CVSS v3.1

8.1

High

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Astra Security Suite – Firewall & Malware Scan plugin for WordPress versions up to 0.2

Description The Astra Security Suite – Firewall & Malware Scan plugin for WordPress is susceptible to arbitrary file uploads. This is due to inadequate validation of remote URLs when downloading zip files and the use of predictable keys. Unauthenticated attackers can exploit this to upload arbitrary files to the server, potentially leading to remote code execution.

Recommendations Update to a version beyond 0.2.

Fix

RCE

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2025-11521

Affected Products

Astra Security Suite – Firewall & Malware Scan

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-11521 · Security Note
• https://twitter.com/CveTodo/status/1988104968264470550 · Twitter Post
• https://wordpress.org/plugins/getastra · Note
• https://twitter.com/CVEnew/status/1988095294903320809 · Twitter Post
• https://t.me/cveNotify/142366 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/f99a6b5c-e95d-49d0-a4b2-1d7188447da1?source=cve · Note