Login Request a demo
BR
Vendor
Brainstormforce
36 products with CVEs on record
139
CVEs
0
On KEV
2
New 30D
Products
SC
SureDash – Community, Courses & Member Dashboard
brainstormforce
6.4
4 CVEs0 on KEV2 new
SP
Spectra
Brainstormforce
9.8
18 CVEs0 on KEV0 new
UA
Ultimate Addons for Elementor
brainstormforce
8.8
14 CVEs0 on KEV0 new
SG
Spectra Gutenberg Blocks – Website Builder for the Block Editor
brainstormforce
8.8
11 CVEs0 on KEV0 new
UA
Ultimate Addons For Beaver Builder
Brainstormforce
8.8
9 CVEs0 on KEV0 new
EH
Elementor Header & Footer Builder
Brainstormforce
5.4
7 CVEs0 on KEV0 new
SU
Sureforms
Brainstormforce
8.1
7 CVEs0 on KEV0 new
SC
SureForms – Contact Form, Payment Form & Other Custom Form Builder
brainstormforce
7.5
7 CVEs0 on KEV0 new
UA
Ultimate Addons For Wpbakery Page Builder
Brainstormforce
8.8
7 CVEs0 on KEV0 new
AS
Astra
brainstormforce
9.8
5 CVEs0 on KEV0 new
ST
Starter Templates
Brainstormforce
8.8
5 CVEs0 on KEV0 new
UA
Ultimate Addons for Beaver Builder – Lite
brainstormforce
5.4
5 CVEs0 on KEV0 new
SC
Schema
Brainstormforce
8.8
4 CVEs0 on KEV0 new
CF
CartFlows – Funnel Builder & Checkout Plugin for WooCommerce
brainstormforce
6.4
3 CVEs0 on KEV0 new
EH
Elementor - Header, Footer & Blocks Template
Brainstormforce
5.4
3 CVEs0 on KEV0 new
ST
Starter Templates – AI-Powered Templates for Elementor & Gutenberg
brainstormforce
8.8
3 CVEs0 on KEV0 new
AW
Astra Widgets
Brainstormforce
5.4
2 CVEs0 on KEV0 new
CF
Cards For Beaver Builder
Brainstormforce
5.4
2 CVEs0 on KEV0 new
CF
Custom Fonts – Host Your Fonts Locally
brainstormforce
5.4
2 CVEs0 on KEV0 new
OA
OttoKit: All-in-One Automation Platform
brainstormforce
8.1
2 CVEs0 on KEV0 new
SL
Spectra Legacy – Gutenberg Blocks
brainstormforce
6.4
2 CVEs0 on KEV0 new
SC
SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz
brainstormforce
7.2
2 CVEs0 on KEV0 new
SD
SureForms – Drag and Drop Form Builder for WordPress
brainstormforce
8.1
2 CVEs0 on KEV0 new
CA
Cartflows
Brainstormforce
8.8
1 CVEs0 on KEV0 new
CP
Convert Pro
Brainstormforce
9.8
1 CVEs0 on KEV0 new
CO
Convertplug
Brainstormforce
8.8
1 CVEs0 on KEV0 new
CF
Custom Fonts
Brainstormforce
5.4
1 CVEs0 on KEV0 new
IE
Import / Export Customizer Settings
brainstormforce
4.3
1 CVEs0 on KEV0 new
LS
Lightweight Sidebar Manager
brainstormforce
4.3
1 CVEs0 on KEV0 new
PC
Pre-publish Checklist
Brainstormforce
8.8
1 CVEs0 on KEV0 new
SP
Spectra Pro
Brainstormforce
8.8
1 CVEs0 on KEV0 new
SU
Surecart
brainstormforce
9.3
1 CVEs0 on KEV0 new
SU
Surefeedback
Brainstormforce
4.3
1 CVEs0 on KEV0 new
SD
SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator
brainstormforce
7.5
1 CVEs0 on KEV0 new
SS
SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers
brainstormforce
8.1
1 CVEs0 on KEV0 new
WR
WP Remote Site Search
Brainstormforce
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-96870
SC
SureDash – Community, Courses & Member Dashboard
brainstormforce
6.4
0%
Oct 16SureDash <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter
CVE-2026-102774
SC
SureDash – Community, Courses & Member Dashboard
brainstormforce
6.4
0%
Oct 10SureDash <= 1.12.1 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content
CVE-2026-16302
SL
Spectra Legacy – Gutenberg Blocks
brainstormforce
4.3
0%
Sep 24Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2026-18406
SC
SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz
brainstormforce
7.2
0%
Sep 5SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload
CVE-2026-18402
SC
SureDash – Community, Courses & Member Dashboard
brainstormforce
6.4
0%
Aug 16SureDash <= 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute
CVE-2026-7623
SC
SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz
brainstormforce
6.4
0%
Aug 1SureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block Attribute
CVE-2026-15821
SC
SureDash – Community, Courses & Member Dashboard
brainstormforce
6.4
0%
Jul 24SureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-15787
UA
Ultimate Addons for Elementor
brainstormforce
6.4
0%
Jul 22Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes
CVE-2026-12900
SL
Spectra Legacy – Gutenberg Blocks
brainstormforce
6.4
0%
Jul 20Spectra Gutenberg Blocks <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via uagb/image Block
CVE-2026-15288
SD
SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator
brainstormforce
7.5
0%
Jul 10SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulation
CVE-2026-7465
SG
Spectra Gutenberg Blocks – Website Builder for the Block Editor
brainstormforce
8.8
1%
May 30Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes
CVE-2026-9065
SU
Surecart
brainstormforce
9.3
0%
May 20Surecart - SQL Injection
CVE-2026-4987
SC
SureForms – Contact Form, Payment Form & Other Custom Form Builder
brainstormforce
7.5
1%
Mar 28SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id'
CVE-2026-3534
AS
Astra
brainstormforce
6.4
0%
Mar 11Astra <= 4.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
CVE-2026-0950
SG
Spectra Gutenberg Blocks – Website Builder for the Block Editor
brainstormforce
5.3
0%
Feb 3Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data
CVE-2025-14351
CF
Custom Fonts – Host Your Fonts Locally
brainstormforce
5.3
0%
Jan 20Custom Fonts – Host Your Fonts Locally <= 2.1.16 - Missing Authorization to Unauthenticated Font Deletion
CVE-2025-14855
SC
SureForms – Contact Form, Payment Form & Other Custom Form Builder
brainstormforce
7.2
0%
Dec 21SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-13065
ST
Starter Templates – AI-Powered Templates for Elementor & Gutenberg
brainstormforce
8.8
14%
Dec 6Starter Templates <= 4.4.41 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass
CVE-2025-13516
SS
SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers
brainstormforce
8.1
1%
Dec 2SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers <= 1.9.0 - Unauthenticated Arbitrary File Upload
CVE-2025-12535
SC
SureForms – Contact Form, Payment Form & Other Custom Form Builder
brainstormforce
5.3
0%
Nov 19SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution
CVE-2025-12536
SC
SureForms – Contact Form, Payment Form & Other Custom Form Builder
brainstormforce
5.3
1%
Nov 13SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure
CVE-2025-11162
SG
Spectra Gutenberg Blocks – Website Builder for the Block Editor
brainstormforce
6.4
0%
Nov 5Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSS
CVE-2025-10732
SC
SureForms – Contact Form, Payment Form & Other Custom Form Builder
brainstormforce
4.3
0%
Oct 14SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure
CVE-2025-10489
SC
SureForms – Contact Form, Payment Form & Other Custom Form Builder
brainstormforce
4.3
0%
Sep 20SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation
CVE-2025-8488
UA
Ultimate Addons for Elementor
brainstormforce
4.3
0%
Aug 2Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
CVE-2025-5921
SU
Sureforms
Brainstormforce
5.8
0%
Aug 1SureForms < 1.7.2 - Reflected XSS
CVE-2025-6691
SD
SureForms – Drag and Drop Form Builder for WordPress
brainstormforce
8.1
1%
Jul 9SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion
CVE-2025-6742
SD
SureForms – Drag and Drop Form Builder for WordPress
brainstormforce
7.5
1%
Jul 9SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion
CVE-2025-3514
SU
Sureforms
Brainstormforce
3.5
0%
May 2SureForms < 1.4.4 - Admin+ Stored XSS
CVE-2025-3513
SU
Sureforms
Brainstormforce
3.5
0%
May 2SureForms < 1.4.4 - Admin+ Stored XSS
CVE-2025-3471
SU
Sureforms
Brainstormforce
4.9
0%
Apr 30SureForms < 1.4.4 - Contributor+ Settings Update
CVE-2025-3102
OA
OttoKit: All-in-One Automation Platform
brainstormforce
8.1
76%
Apr 10SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation
CVE-2025-1784
SG
Spectra Gutenberg Blocks – Website Builder for the Block Editor
brainstormforce
6.4
0%
Mar 26Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12713
SC
SureForms – Contact Form, Payment Form & Other Custom Form Builder
brainstormforce
5.3
0%
Jan 8SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure
CVE-2024-56274
AW
Astra Widgets
Brainstormforce
5.4
0%
Jan 7WordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerability
CVE-2024-11230
UA
Ultimate Addons for Elementor
brainstormforce
5.4
0%
Dec 23Elementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget
CVE-2023-23825
SP
Spectra
Brainstormforce
8.8
1%
Dec 9WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerability
CVE-2023-23834
SP
Spectra
Brainstormforce
9.8
1%
Dec 9WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerability
CVE-2024-10484
SG
Spectra Gutenberg Blocks – Website Builder for the Block Editor
brainstormforce
5.4
0%
Dec 3Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget
CVE-2024-10325
UA
Ultimate Addons for Elementor
brainstormforce
5.4
0%
Nov 8Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-37517
SP
Spectra
Brainstormforce
8.8
0%
Nov 1WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability
CVE-2024-50439
AW
Astra Widgets
Brainstormforce
5.4
0%
Oct 28WordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-10050
UA
Ultimate Addons for Elementor
brainstormforce
4.3
0%
Oct 24Elementor Header & Footer Builder <= 1.6.43 - Authenticated (Contributor+) Information Disclosure via Shortcode
CVE-2024-43151
UA
Ultimate Addons For Beaver Builder
Brainstormforce
5.4
0%
Aug 12WordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-7590
SP
Spectra
Brainstormforce
5.4
0%
Aug 12WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-33933
EH
Elementor - Header, Footer & Blocks Template
Brainstormforce
5.4
0%
Jul 22WordPress Elementor Header & Footer Builder plugin <= 1.6.35 - Contributor+ DOM-Based Cross Site Scripting (XSS) vulnerability
CVE-2024-37278
CF
Cards For Beaver Builder
Brainstormforce
5.4
0%
Jul 22WordPress Cards for Beaver Builder plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability
CVE-2024-5251
UA
Ultimate Addons For Wpbakery Page Builder
Brainstormforce
5.4
0%
Jul 17Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-5253
UA
Ultimate Addons For Wpbakery Page Builder
Brainstormforce
5.4
0%
Jul 17Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-5252
UA
Ultimate Addons For Wpbakery Page Builder
Brainstormforce
5.4
0%
Jul 17Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-5255
UA
Ultimate Addons For Wpbakery Page Builder
Brainstormforce
5.4
0%
Jul 17Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-5254
UA
Ultimate Addons For Wpbakery Page Builder
Brainstormforce
5.4
0%
Jul 17Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-37455
UA
Ultimate Addons For Elementor
Brainstormforce
8.8
0%
Jul 9WordPress Ultimate Addons for elementor plugin <= 1.36.31 - Privilege Escalation vulnerability
CVE-2023-36676
SP
Spectra
Brainstormforce
8.8
0%
Jun 19WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerability
CVE-2023-36684
CP
Convert Pro
Brainstormforce
9.8
1%
Jun 19WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerability
CVE-2023-41805
ST
Starter Templates
Brainstormforce
6.5
0%
Jun 19Broken Access Control vulnerability in multiple Brainstorm Force plugins
CVE-2023-44148
AS
Astra
Brainstormforce
8.8
0%
Jun 19WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability
CVE-2023-44151
PC
Pre-publish Checklist
Brainstormforce
8.8
0%
Jun 19WordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerability
CVE-2024-4632
CF
CartFlows – Funnel Builder & Checkout Plugin for WooCommerce
brainstormforce
6.4
0%
Jun 19WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2023-51376
SU
Surefeedback
Brainstormforce
4.3
0%
Jun 14WordPress ProjectHuddle Client Site plugin <= 1.0.34 - Broken Access Control vulnerability