Brainstorm Force vulnerabilities

Products

• Spectra 14
• Ultimate Addons For Elementor 14
• Suredash 11
• Ultimate Addons For Wpbakery Page Builder 8
• Starter Templates 7
• Ultimate Addons For Beaver Builder – Lite 7
• Surecart 6
• Ultimate Addons For Wpbakery 6
• Cartflows 5
• Convertplus 5
• Ottokit 5
• Sureforms 5
• Astra Widgets 3
• Presto Player 3
• Ultimate Addons For Beaver Builder 3
• Astra Bulk Edit 2
• Premium Starter Templates 2
• Spectra Pro 2
• Starter Templates — Elementor, Wordpress & Beaver Builder Templates 2

Newest

• brainstorm force sureforms WordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerability CVE-2026-120842 5.3 MediumNovember 7, 2026
• brainstorm force spectra WordPress Spectra plugin <= 2.20.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-119520 6.5 MediumNovember 7, 2026
• brainstorm force cartflows WordPress CartFlows plugin <= 3.3.0 - Broken Access Control vulnerability CVE-2026-120853 5.3 MediumNovember 7, 2026
• brainstorm force cartflows WordPress CartFlows plugin <= 3.3.0 - Content Injection vulnerability CVE-2026-120852 5.3 MediumNovember 7, 2026
• brainstorm force suredash WordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerability CVE-2026-115604 5.0 MediumOctober 30, 2026
• brainstorm force ultimate addons for elementor - lite WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-39739 6.5 MediumOctober 30, 2026
• brainstorm force suredash WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerability CVE-2026-115605 4.3 MediumOctober 29, 2026
• brainstorm force suredash WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-110881 6.5 MediumOctober 29, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability CVE-2026-116387 5.3 MediumOctober 29, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability CVE-2026-116402 5.3 MediumOctober 29, 2026
• brainstorm force suredash WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability CVE-2026-110892 6.5 MediumOctober 24, 2026
• brainstorm force surecart WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability CVE-2026-112241 9.8 CriticalOctober 22, 2026
• brainstorm force suredash WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability CVE-2026-110893 5.3 MediumOctober 22, 2026
• brainstorm force suredash WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability CVE-2026-110894 5.3 MediumOctober 22, 2026
• brainstorm force surecart WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-112221 7.1 HighOctober 21, 2026
• brainstorm force surecart WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-112840 6.5 MediumOctober 20, 2026
• brainstorm force ottokit WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability CVE-2026-110372 9.8 CriticalOctober 18, 2026
• brainstorm force presto player, presto made, inc player +1 more WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-109893 6.5 MediumOctober 15, 2026
• brainstorm force surecart WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability CVE-2026-106599 8.8 HighOctober 14, 2026
• brainstorm force surecart WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-105874 7.1 HighOctober 14, 2026
• brainstorm force surecart WordPress SureCart plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-109697 6.5 MediumOctober 13, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-108495 6.5 MediumOctober 13, 2026
• brainstorm force starter templates WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability CVE-2026-39721 5.4 MediumOctober 5, 2026
• brainstorm force starter templates WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-102393 6.5 MediumOctober 5, 2026
• brainstorm force presto player, presto made, inc player +1 more WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-102914 6.5 MediumOctober 5, 2026
• brainstorm force cartflows WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability CVE-2026-96837 8.8 HighSeptember 30, 2026
• brainstorm force astra wordpress theme WordPress Astra WordPress theme theme <= 4.13.12 - Content Injection vulnerability CVE-2026-27085 2.7 LowSeptember 30, 2026
• brainstorm force convertplus ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameter CVE-2026-87741 8.8 HighSeptember 28, 2026
• brainstorm force starter templates WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-62134 4.3 MediumSeptember 11, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-85308 5.3 MediumSeptember 3, 2026
• brainstorm force surefeedback client site WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability CVE-2026-80433 7.5 HighAugust 27, 2026
• brainstorm force ottokit WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-32553 7.2 HighAugust 18, 2026
• brainstorm force suredash WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66698 7.1 HighAugust 13, 2026
• brainstorm force ultimate addons for elementor WordPress Ultimate Addons for Elementor plugin <= 1.45.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-66688 6.5 MediumAugust 6, 2026
• brainstorm force ultimate addons for wpbakery page builder Ultimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons Shortcode CVE-2026-14921 6.1 MediumJuly 31, 2026
• brainstorm force ultimate addons for wpbakery page builder Ultimate Addons for WPBakery Page Builder < 3.21.4 - Unauthenticated Custom Icon Font Deletion via delete-bsf-fonts CVE-2026-15382 6.5 MediumJuly 30, 2026
• brainstorm force ultimate addons for elementor Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes CVE-2026-15787 6.4 MediumJuly 22, 2026
• brainstorm force suredash WordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerability CVE-2026-57401 9.9 CriticalJuly 13, 2026
• brainstorm force ultimate addons for beaver builder WordPress Ultimate Addons for Beaver Builder 1.2.4.1 Authentication Bypass CVE-2019-25763 9.3 CriticalJune 20, 2026
• brainstorm force suredash WordPress SureDash plugin <= 1.8.0 - SQL Injection vulnerability CVE-2026-54813 8.5 HighJune 17, 2026
• brainstorm force ottokit WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability CVE-2026-49781 9.8 CriticalJune 15, 2026
• brainstorm force woocommerce cart abandonment recovery WordPress WooCommerce Cart Abandonment Recovery plugin < 2.1.0 - Privilege Escalation vulnerability CVE-2026-39470 7.2 HighJune 15, 2026
• brainstorm force presto player, presto made, inc player +1 more WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability CVE-2026-45442 4.3 MediumMay 19, 2026
• brainstorm force spectra WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability CVE-2026-42648 4.3 MediumApril 29, 2026
• brainstorm force sureforms pro WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerability CVE-2026-42377 7.3 HighApril 29, 2026
• brainstorm force ottokit WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerability CVE-2026-39479 7.6 HighApril 8, 2026
• brainstorm force cartflows WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability CVE-2026-39477 4.3 MediumApril 8, 2026
• brainstorm force ultimate addons for wpbakery page builder WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-34889 6.5 MediumApril 1, 2026
• brainstorm force astra bulk edit WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability CVE-2026-32431 6.5 MediumMarch 13, 2026
• brainstorm force ultimate addons for wpbakery page builder WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability CVE-2026-28038 6.5 MediumMarch 5, 2026
• Show olderLoading…