Brainstorm Force Sureforms vulnerabilities

• brainstorm force sureforms WordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerability CVE-2026-120842 5.3 MediumNovember 7, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability CVE-2026-116387 5.3 MediumOctober 29, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability CVE-2026-116402 5.3 MediumOctober 29, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-108495 6.5 MediumOctober 13, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-85308 5.3 MediumSeptember 3, 2026
• brainstorm force sureforms pro WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerability CVE-2026-42377 7.3 HighApril 29, 2026