Login Request a demo
BF
Vendor
Brainstorm Force
18 products with CVEs on record
38
CVEs
0
On KEV
18
New 30D
Products
SU
SureCart
Brainstorm Force
9.8
6 CVEs0 on KEV6 new
SU
SureDash
Brainstorm Force
9.9
6 CVEs0 on KEV3 new
OT
OttoKit
Brainstorm Force
9.8
4 CVEs0 on KEV1 new
PP
Presto Player
Brainstorm Force
6.5
3 CVEs0 on KEV2 new
ST
Starter Templates
Brainstorm Force
6.5
3 CVEs0 on KEV2 new
CA
CartFlows
Brainstorm Force
8.8
2 CVEs0 on KEV1 new
SU
SureForms
Brainstorm Force
6.5
2 CVEs0 on KEV1 new
AW
Astra WordPress Theme
Brainstorm Force
2.7
1 CVEs0 on KEV1 new
CO
ConvertPlus
Brainstorm Force
8.8
1 CVEs0 on KEV1 new
UA
Ultimate Addons for WPBakery Page Builder
Brainstorm_Force
6.5
2 CVEs0 on KEV0 new
AB
Astra Bulk Edit
Brainstorm Force
6.5
1 CVEs0 on KEV0 new
AW
Astra Widgets
Brainstorm Force
5.4
1 CVEs0 on KEV0 new
CP
Convert Pro
Brainstorm Force
5.3
1 CVEs0 on KEV0 new
SP
Spectra
Brainstorm Force
4.3
1 CVEs0 on KEV0 new
SC
SureFeedback Client Site
Brainstorm Force
7.5
1 CVEs0 on KEV0 new
SP
SureForms Pro
Brainstorm Force
7.3
1 CVEs0 on KEV0 new
UA
Ultimate Addons for Elementor
Brainstorm Force
6.5
1 CVEs0 on KEV0 new
WC
WooCommerce Cart Abandonment Recovery
Brainstorm Force
7.2
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-110892
New
SU
SureDash
Brainstorm Force
6.5
0%
Oct 24WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
CVE-2026-112241
New
SU
SureCart
Brainstorm Force
9.8
0%
Oct 22WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability
CVE-2026-110893
New
SU
SureDash
Brainstorm Force
5.3
0%
Oct 22WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
CVE-2026-110894
New
SU
SureDash
Brainstorm Force
5.3
0%
Oct 22WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
CVE-2026-112221
New
SU
SureCart
Brainstorm Force
7.1
0%
Oct 21WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-112840
SU
SureCart
Brainstorm Force
6.5
0%
Oct 20WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-110372
OT
OttoKit
Brainstorm Force
9.8
1%
Oct 18WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
CVE-2026-109893
PP
Presto Player
Brainstorm Force
6.5
0%
Oct 15WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105874
SU
SureCart
Brainstorm Force
7.1
0%
Oct 14WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-106599
SU
SureCart
Brainstorm Force
8.8
0%
Oct 14WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability
CVE-2026-109697
SU
SureCart
Brainstorm Force
6.5
0%
Oct 13WordPress SureCart plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-108495
SU
SureForms
Brainstorm Force
6.5
0%
Oct 13WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39721
ST
Starter Templates
Brainstorm Force
5.4
0%
Oct 5WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability
CVE-2026-102393
ST
Starter Templates
Brainstorm Force
6.5
0%
Oct 5WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102914
PP
Presto Player
Brainstorm Force
6.5
0%
Oct 5WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96837
CA
CartFlows
Brainstorm Force
8.8
1%
Sep 30WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability
CVE-2026-27085
AW
Astra WordPress Theme
Brainstorm Force
2.7
0%
Sep 30WordPress Astra WordPress theme theme <= 4.13.12 - Content Injection vulnerability
CVE-2026-87741
CO
ConvertPlus
Brainstorm Force
8.8
0%
Sep 28ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameter
CVE-2026-62134
ST
Starter Templates
Brainstorm Force
4.3
0%
Sep 11WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-85308
SU
SureForms
Brainstorm Force
5.3
0%
Sep 3WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-80433
SC
SureFeedback Client Site
Brainstorm Force
7.5
0%
Aug 27WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability
CVE-2026-32553
OT
OttoKit
Brainstorm Force
7.2
0%
Aug 18WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-66698
SU
SureDash
Brainstorm Force
7.1
0%
Aug 13WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66688
UA
Ultimate Addons for Elementor
Brainstorm Force
6.5
0%
Aug 6WordPress Ultimate Addons for Elementor plugin <= 1.45.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57401
SU
SureDash
Brainstorm Force
9.9
1%
Jul 13WordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerability
CVE-2026-54813
SU
SureDash
Brainstorm Force
8.5
0%
Jun 17WordPress SureDash plugin <= 1.8.0 - SQL Injection vulnerability
CVE-2026-49781
OT
OttoKit
Brainstorm Force
9.8
0%
Jun 15WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability
CVE-2026-39470
WC
WooCommerce Cart Abandonment Recovery
Brainstorm Force
7.2
0%
Jun 15WordPress WooCommerce Cart Abandonment Recovery plugin < 2.1.0 - Privilege Escalation vulnerability
CVE-2026-45442
PP
Presto Player
Brainstorm Force
4.3
0%
May 19WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability
CVE-2026-42648
SP
Spectra
Brainstorm Force
4.3
0%
Apr 29WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability
CVE-2026-42377
SP
SureForms Pro
Brainstorm Force
7.3
0%
Apr 29WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerability
CVE-2026-39479
OT
OttoKit
Brainstorm Force
7.6
0%
Apr 8WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerability
CVE-2026-39477
CA
CartFlows
Brainstorm Force
4.3
0%
Apr 8WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability
CVE-2026-34889
UA
Ultimate Addons for WPBakery Page Builder
Brainstorm Force
6.5
0%
Apr 1WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32431
AB
Astra Bulk Edit
Brainstorm Force
6.5
0%
Mar 13WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28038
UA
Ultimate Addons for WPBakery Page Builder
Brainstorm_Force
6.5
0%
Mar 5WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability
CVE-2025-63031
CP
Convert Pro
Brainstorm Force
5.3
0%
Dec 31WordPress Convert Pro plugin <= 1.0.1 - Broken Access Control vulnerability
CVE-2024-56274
AW
Astra Widgets
Brainstorm Force
5.4
0%
Jan 7WordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerability