The free version of the Astra theme has been updated to version 3.8.0. There is also a paid pro version of the theme and that one has been updated to version 3.6.8. Simplified Design Flow.

“The Astra theme for WordPress is vulnerable to Stored Cross-Site Scripting via a user’s display name in all versions up to, and including, 4.6.8 due to insufficient input sanitization and ...