Skip to contentBrainstorm Force vulnerabilities
Newest
- brainstorm force cartflowsWordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerabilityCVE-2026-253167.2 High
- brainstorm force spectraWordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerabilityCVE-2026-249825.3 Medium
- brainstorm force sigmizeWordPress Sigmize plugin <= 0.0.9 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-249624.3 Medium
- brainstorm force astra widgetsWordPress Astra Widgets plugin <= 1.2.16 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-684975.9 Medium
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change VulnerabilityCVE-2023-237295.4 Medium
- brainstorm force surerankWordPress SureRank plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-620597.1 High
- brainstorm force ultimate addons for wpbakery page builderWordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-480886.5 Medium
- brainstorm force ultimate addons for wpbakeryUltimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-118146.4 Medium
- brainstorm force suredashWordPress SureDash <= 1.0.3 - Privilege Escalation VulnerabilityCVE-2025-481648.8 High
- brainstorm force suredashWordPress SureDash Plugin <= 1.1.0 - Sensitive Data Exposure VulnerabilityCVE-2025-546856.5 Medium
- brainstorm force ultimate addons for elementorUltimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to Authenticated (Subscriber+) Limited Settings UpdateCVE-2025-84884.3 Medium
- brainstorm force ottokitWordPress SureTriggers <= 1.0.82 - Privilege Escalation VulnerabilityCVE-2025-27007Public exploitEPSS 54.2%9.8 Critical
- brainstorm force suremembersSureMembers <= 1.10.6 - Sensitive Information ExposureCVE-2024-124345.3 Medium
- brainstorm force convertplusPopup Plugin For WordPress - ConvertPlus <= 3.5.30 - Missing Authorization to Authenticated (Subscriber+) Limited Options UpdateCVE-2024-13800Public exploit8.1 High
- brainstorm force starter templatesWordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-245684.3 Medium
- brainstorm force astra widgetsWordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-562746.5 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title WidgetCVE-2024-112306.4 Medium
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerabilityCVE-2023-238253.1 Low
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerabilityCVE-2023-238344.3 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-103256.4 Medium
- brainstorm force spectraWordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerabilityCVE-2024-375174.3 Medium
- brainstorm force astra widgetsWordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2024-504396.5 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.43 - Authenticated (Contributor+) Information Disclosure via ShortcodeCVE-2024-100504.3 Medium
- brainstorm force starter templatesWordPress Starter Templates plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-473455.9 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreWordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-431516.5 Medium
- brainstorm force spectraWordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-75906.5 Medium
- brainstorm force spectra pro, wpspectra spectra +1 moreSpectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDsCVE-2024-38276.4 Medium
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-52516.4 Medium
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-52536.4 Medium
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-52526.4 Medium
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-52556.4 Medium
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-52546.4 Medium
- brainstorm force ultimate addons for elementorWordPress Ultimate Addons for elementor plugin <= 1.36.31 - Privilege Escalation vulnerabilityCVE-2024-374558.8 High
- brainstorm force spectraWordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerabilityCVE-2023-366765.4 Medium
- brainstorm force convert proWordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerabilityCVE-2023-366847.1 High
- brainstorm force premium starter templates, starter templates +1 moreBroken Access Control vulnerability in multiple Brainstorm Force pluginsCVE-2023-418056.5 Medium
- brainstorm force astra bulk edit, brainstormforce astra +1 moreWordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerabilityCVE-2023-441485.4 Medium
- brainstorm force pre-publish checklistWordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerabilityCVE-2023-441515.4 Medium
- brainstorm force projecthuddle client site, brainstormforce surefeedback +1 moreWordPress ProjectHuddle Client Site plugin <= 1.0.34 - Broken Access Control vulnerabilityCVE-2023-513764.3 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor - header\, footer \& blocks template +1 moreElementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title WidgetCVE-2024-57576.4 Medium
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing VulnerabilityCVE-2023-237385.3 Medium
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection VulnerabilityCVE-2023-237355.3 Medium
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass VulnerabilityCVE-2023-237305.3 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.26 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-26186.4 Medium
- brainstorm force ultimate addons for beaver builderWordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.13 - Limited Arbitrary File Download vulnerabilityCVE-2023-514016.3 Medium
- brainstorm force ultimate addons for beaver builderWordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.14 - Privilege Escalation vulnerabilityCVE-2023-513988.8 High
- brainstorm force ultimate addons for elementorWordPress Ultimate Addons for Elementor plugin <= 1.36.20 - Privilege Escalation vulnerabilityCVE-2023-508908.8 High
- brainstorm force ultimate addons for wpbakery page builderWordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 - Local File Inclusion vulnerabilityCVE-2023-462057.1 High
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML InjectionCVE-2024-26195.0 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-46346.4 Medium
- Show moreLoading…