Brainstorm Force vulnerabilities
103 CVEs and advisories name Brainstorm Force as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-120842WordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerability
- CVE-2026-119520WordPress Spectra plugin <= 2.20.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-120853WordPress CartFlows plugin <= 3.3.0 - Broken Access Control vulnerability
- CVE-2026-120852WordPress CartFlows plugin <= 3.3.0 - Content Injection vulnerability
- CVE-2026-115604WordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerability
- CVE-2026-39739WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115605WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerability
- CVE-2026-110881WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-116387WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability
- CVE-2026-116402WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability
- CVE-2026-110892WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
- CVE-2026-112241WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability
- CVE-2026-110893WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
- CVE-2026-110894WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
- CVE-2026-112221WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-112840WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-110372WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
- CVE-2026-109893WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-105874WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-106599WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability
- CVE-2026-109697WordPress SureCart plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-108495WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-39721WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability
- CVE-2026-102393WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-102914WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-96837WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability
- CVE-2026-27085WordPress Astra WordPress theme theme <= 4.13.12 - Content Injection vulnerability
- CVE-2026-87741ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameter
- CVE-2026-62134WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-85308WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability