Brainstormforce - vulnerabilities (CVEs)

115 CVEs in 49 products, 2 in the last 30 days, newest from 2026-10-16.

Products

Spectra - 18 CVEs
Spectra Gutenberg Blocks Website Builder For The Block Editor - 11 CVEs
Ultimate Addons For Beaver Builder - 10 CVEs
Ultimate Addons For Elementor - 10 CVEs
Elementor Header & Footer Builder - 7 CVEs
Payment Form Other Custom Form Builder - 7 CVEs
Sureforms - 7 CVEs
Sureforms Contact Form - 7 CVEs
Ultimate Addons For Wpbakery Page Builder - 7 CVEs
Starter Templates - 5 CVEs
Ultimate Addons For Beaver Builder Lite - 5 CVEs
Courses Member Dashboard - 4 CVEs
Schema - 4 CVEs
Suredash Community - 4 CVEs
Astra - 3 CVEs
Cartflows Funnel Builder Checkout Plugin For Woocommerce - 3 CVEs
Elementor - Header, Footer & Blocks Template - 3 CVEs
Payment Form - 3 CVEs
Starter Templates Ai-powered Templates For Elementor Gutenberg - 3 CVEs
Ai Forms - 2 CVEs
Astra Widgets - 2 CVEs
Cards For Beaver Builder - 2 CVEs
Custom Fonts Host Your Fonts Locally - 2 CVEs
Ottokit All-in-one Automation Platform - 2 CVEs
Spectra Legacy Gutenberg Blocks - 2 CVEs
Sureforms Contact Form Builder - 2 CVEs
Sureforms Drag And Drop Form Builder For Wordpress - 2 CVEs
Survey Quiz - 2 CVEs
And Other Providers - 1 CVEs
Cartflows - 1 CVEs
Convert Pro - 1 CVEs
Convertplug - 1 CVEs
Custom Fonts - 1 CVEs
Gutenberg Beaver Builder Templates - 1 CVEs
Import / Export Customizer Settings - 1 CVEs
Import Export Customizer Settings - 1 CVEs
Lightweight Sidebar Manager - 1 CVEs
Postmark - 1 CVEs
Pre-publish Checklist - 1 CVEs
Quiz Calculator - 1 CVEs
Spectra Pro - 1 CVEs
Starter Templates Elementor - 1 CVEs
Surecart - 1 CVEs
Surefeedback - 1 CVEs
Sureforms Drag Drop Contact Form Form Builder - 1 CVEs
Suremail Smtp And Email Logs Plugin With Amazon Ses - 1 CVEs
Survey - 1 CVEs
Wp Remote Site Search - 1 CVEs
Schema Pro - 0 CVEs

Newest CVEs of Brainstormforce

CVE-2026-96870 - CVSS 6.4 (medium), 2026-10-16: The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all…
CVE-2026-102774 - CVSS 6.4 (medium), 2026-10-10: The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in…
CVE-2026-16302 - CVSS 4.3 (medium), 2026-09-24: The Spectra Legacy – Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.20.0 via…
CVE-2026-18406 - CVSS 7.2 (high), 2026-09-05: The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field…
CVE-2026-18402 - CVSS 6.4 (medium), 2026-08-16: The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'draweropenverposition'…
CVE-2026-7623 - CVSS 6.4 (medium), 2026-08-01: The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
CVE-2026-15821 - CVSS 6.4 (medium), 2026-07-24: The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all…
CVE-2026-15787 - CVSS 6.4 (medium), 2026-07-22: The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu Widget…
CVE-2026-12900 - CVSS 6.4 (medium), 2026-07-20: The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `uagb/image`…
CVE-2026-15288 - CVSS 7.5 (high), 2026-07-10: The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including,…
CVE-2019-25763 - CVSS 9.8 (critical), 2026-06-20: WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contains an authentication bypass vulnerability that allows attackers to gain unauthorized access by…
CVE-2026-7465 - CVSS 8.8 (high), 2026-05-30: The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and…
CVE-2026-9065 - CVSS 9.3 (critical), 2026-05-20: SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameters ('model_name', 'model_id', 'integration_id', 'provider')…
CVE-2026-4987 - CVSS 7.5 (high), 2026-03-28: The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Payment Amount Bypass in all versions up to, and…
CVE-2026-3534 - CVSS 6.4 (medium), 2026-03-11: The Astra theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `ast-page-background-meta` and `ast-content-background-meta` post meta…
CVE-2026-0950 - CVSS 5.3 (medium), 2026-02-03: The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and…
CVE-2025-14351 - CVSS 5.3 (medium), 2026-01-20: The Custom Fonts – Host Your Fonts Locally plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the…
CVE-2025-14855 - CVSS 7.2 (high), 2025-12-21: The SureForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form field parameters in all versions up to, and including, 2.2.0 due…
CVE-2025-13065 - CVSS 8.8 (high), 2025-12-06: The Starter Templates plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 4.4.41. This is due to insufficient…
CVE-2025-13516 - CVSS 8.1 (high), 2025-12-02: The SureMail – SMTP and Email Logs Plugin for WordPress is vulnerable to Unrestricted Upload of File with Dangerous Type in versions up to and including…
CVE-2025-12535 - CVSS 5.3 (medium), 2025-11-19: The SureForms plugin for WordPress is vulnerable to Cross-Site Request Forgery Bypass in all versions up to, and including, 1.13.1. This is due to the plugin…
CVE-2025-12536 - CVSS 5.3 (medium), 2025-11-13: The SureForms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.1 via the…
CVE-2025-11162 - CVSS 6.4 (medium), 2025-11-05: The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in…
CVE-2025-10732 - CVSS 4.3 (medium), 2025-10-14: The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and…
CVE-2025-10489 - CVSS 4.3 (medium), 2025-09-20: The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress is vulnerable to unauthorized…
CVE-2025-8488 - CVSS 4.3 (medium), 2025-08-02: The Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) plugin for WordPress is vulnerable to unauthorized modification of data due to…
CVE-2025-5921 - CVSS 5.8 (medium), 2025-08-01: The SureForms WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site…
CVE-2025-6742 - CVSS 7.5 (high), 2025-07-09: The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,…
CVE-2025-6691 - CVSS 8.1 (high), 2025-07-09: The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path…
CVE-2025-3513 - CVSS 3.5 (low), 2025-05-02: The SureForms WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to…