Brainstorm Force vulnerabilities
103 CVEs and advisories name Brainstorm Force as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-80433WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability
- CVE-2026-32553WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2026-66698WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-66688WordPress Ultimate Addons for Elementor plugin <= 1.45.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-57401WordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerability
- CVE-2026-54813WordPress SureDash plugin <= 1.8.0 - SQL Injection vulnerability
- CVE-2026-49781WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability
- CVE-2026-39470WordPress WooCommerce Cart Abandonment Recovery plugin < 2.1.0 - Privilege Escalation vulnerability
- CVE-2026-45442WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability
- CVE-2026-42648WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability
- CVE-2026-42377WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerability
- CVE-2026-39479WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerability
- CVE-2026-39477WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability
- CVE-2026-34889WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-32431WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-28038WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability
- CVE-2026-25316WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerability
- CVE-2026-24982WordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerability
- CVE-2026-24962WordPress Sigmize plugin <= 0.0.9 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-68497WordPress Astra Widgets plugin <= 1.2.16 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-23729WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change Vulnerability
- CVE-2025-62059WordPress SureRank plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-48088WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-11814Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2025-48164WordPress SureDash <= 1.0.3 - Privilege Escalation Vulnerability
- CVE-2025-54685WordPress SureDash Plugin <= 1.1.0 - Sensitive Data Exposure Vulnerability
- CVE-2025-27007WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability
- CVE-2024-12434SureMembers <= 1.10.6 - Sensitive Information Exposure
- CVE-2024-13800Popup Plugin For WordPress - ConvertPlus <= 3.5.30 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
- CVE-2025-24568WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability