Skip to contentBrainstormforce vulnerabilities
Newest
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-52526.4 Medium
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-52556.4 Medium
- brainstorm force ultimate addons for wpbakery, brainstormforce ultimate addons for wpbakery page builder +1 moreUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-52546.4 Medium
- brainstorm force ultimate addons for elementorWordPress Ultimate Addons for elementor plugin <= 1.36.31 - Privilege Escalation vulnerabilityCVE-2024-374558.8 High
- brainstorm force spectraWordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerabilityCVE-2023-366765.4 Medium
- brainstorm force convert proWordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerabilityCVE-2023-366847.1 High
- brainstorm force premium starter templates, starter templates +1 moreBroken Access Control vulnerability in multiple Brainstorm Force pluginsCVE-2023-418056.5 Medium
- brainstorm force astra bulk edit, brainstormforce astra +1 moreWordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerabilityCVE-2023-441485.4 Medium
- brainstorm force pre-publish checklistWordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerabilityCVE-2023-441515.4 Medium
- cartflows funnel builder, brainstormforce cartflows – funnel builder & checkout plugin for woocommerce +1 moreWooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-46326.4 Medium
- brainstorm force projecthuddle client site, brainstormforce surefeedback +1 moreWordPress ProjectHuddle Client Site plugin <= 1.0.34 - Broken Access Control vulnerabilityCVE-2023-513764.3 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor - header\, footer \& blocks template +1 moreElementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title WidgetCVE-2024-57576.4 Medium
- brainstormforce cards for beaver builderCards for Beaver Builder <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Cards WidgetCVE-2024-56636.4 Medium
- suretriggers, brainstormforce ottokit: all-in-one automation platform +1 moreSureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! <= 1.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trigger Link ShortcodeCVE-2024-54856.4 Medium
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing VulnerabilityCVE-2023-237385.3 Medium
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection VulnerabilityCVE-2023-237355.3 Medium
- brainstorm force spectraWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass VulnerabilityCVE-2023-237305.3 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-43666.4 Medium
- brainstormforce custom fonts – host your fonts locally, custom fonts +1 moreCustom Fonts – Host Your Fonts Locally <= 2.1.4 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-13326.4 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.26 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-26186.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial BlockCVE-2024-18146.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Gallery BlockCVE-2024-18156.4 Medium
- brainstorm force ultimate addons for beaver builderWordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.13 - Limited Arbitrary File Download vulnerabilityCVE-2023-514016.3 Medium
- brainstorm force ultimate addons for beaver builderWordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.14 - Privilege Escalation vulnerabilityCVE-2023-513988.8 High
- brainstorm force ultimate addons for elementorWordPress Ultimate Addons for Elementor plugin <= 1.36.20 - Privilege Escalation vulnerabilityCVE-2023-508908.8 High
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML InjectionCVE-2024-26195.0 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-46346.4 Medium
- brainstormforce starter templates, starter templates – ai-powered templates for elementor & gutenberg +1 moreStarter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-46306.4 Medium
- brainstorm force spectra proSpectra Pro <= 1.1.5 - Authenticated (Author+) Privilege EscalationCVE-2024-38288.8 High
- brainstormforce starter templates – ai-powered templates for elementor & gutenbergStarter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side Request ForgeryCVE-2024-14674.3 Medium
- brainstormforce convertplug, brainstorm force convertplus +1 moreConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object InjectionCVE-2024-32408.8 High
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path TraversalCVE-2024-31074.3 Medium
- brainstormforce astraAstra <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display NameCVE-2024-23476.4 Medium
- brainstormforce spectra, spectra gutenberg blocks – website builder for the block editor +1 moreSpectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSSCVE-2023-64866.4 Medium
- brainstormforce cards for beaver builderCards for Beaver Builder <= 1.1.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via bootstrapcard linkCVE-2024-23056.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons WidgetCVE-2024-21406.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table WidgetCVE-2024-21426.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button WidgetCVE-2024-21416.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator WidgetCVE-2024-21446.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading WidgetCVE-2024-21436.4 Medium
- brainstorm force premium starter templates, starter templates — elementor, wordpress & beaver builder templates +1 moreServer Side Request Forgery (SSRF) vulnerability in Starter Templates pluginsCVE-2023-343707.1 High
- brainstorm force spectraWordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2023-366797.1 High
- brainstorm force astraWordPress Astra theme <= 4.6.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-297685.9 Medium
- brainstormforce schema, unknown wp-schema-pro, wpschema pro +2 moreSchema Pro < 2.7.16 - Contributor+ Custom Field AccessCVE-2024-15644.3 Medium
- brainstorm force ultimate addons for elementor, brainstormforce elementor header \& footer builder +1 moreElementor Header & Footer Builder <= 1.6.24 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-12376.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreWordPress Ultimate Addons for Beaver Builder – Lite Plugin <= 1.5.5 is vulnerable to Broken Access ControlCVE-2023-238824.3 Medium
- brain storm force ultimate addons for wpbakery page builderWordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-514024.3 Medium
- brainstorm force wp remote site searchWordPress WP Remote Site Search Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-513976.5 Medium
- brainstorm force astra pro, brainstormforce astra +1 moreWordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)CVE-2023-498309.9 Critical
- brainstormforce suretriggers – connect all your plugins, apps, tools & automate everything!, suretriggers, suretriggers – connect all your plugins, apps, tools & automate everything! +2 moreWordPress SureTriggers Plugin <= 1.0.23 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-497494.3 Medium
- Show moreLoading…