CVEs we hold for Brainstorm
Records whose assigning authority named Brainstorm as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-85308WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerabilityBrainstorm Force SureForms
CVE-2026-80433WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerabilityBrainstorm Force SureFeedback Client Site
CVE-2026-7623SureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block Attributebrainstormforce SureForms – Contact Form Builder, AI Forms…
CVE-2026-7465Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function…brainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2026-66698WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force SureDash
CVE-2026-66688WordPress Ultimate Addons for Elementor plugin <= 1.45.2 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Ultimate Addons for Elementor
CVE-2026-62134WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerabilityBrainstorm Force Starter Templates
CVE-2026-57401WordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerabilityBrainstorm Force SureDash
CVE-2026-54813WordPress SureDash plugin <= 1.8.0 - SQL Injection vulnerabilityBrainstorm Force SureDash
CVE-2026-4987SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id'brainstormforce SureForms – Contact Form, Payment Form &…
CVE-2026-49781WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerabilityBrainstorm Force OttoKit
CVE-2026-45442WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerabilityBrainstorm Force Presto Player
CVE-2026-42648WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerabilityBrainstorm Force Spectra
CVE-2026-42377WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerabilityBrainstorm Force SureForms Pro
CVE-2026-39479WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerabilityBrainstorm Force OttoKit
CVE-2026-39477WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerabilityBrainstorm Force CartFlows
CVE-2026-39470WordPress WooCommerce Cart Abandonment Recovery plugin < 2.1.0 - Privilege Escalation vulnerabilityBrainstorm Force WooCommerce Cart Abandonment Recovery
CVE-2026-3534Astra <= 4.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Metabrainstormforce Astra
CVE-2026-34889WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Ultimate Addons for WPBakery Page Builder
CVE-2026-32553WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerabilityBrainstorm Force OttoKit
CVE-2026-32431WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Astra Bulk Edit
CVE-2026-28038WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerabilityBrainstorm_Force Ultimate Addons for WPBakery Page Builder
CVE-2026-25316WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerabilityBrainstorm Force CartFlows
CVE-2026-24982WordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerabilityBrainstorm Force Spectra
CVE-2026-24962WordPress Sigmize plugin <= 0.0.9 - Cross Site Request Forgery (CSRF) vulnerabilityBrainstorm Force Sigmize
CVE-2026-18406SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payloadbrainstormforce SureForms – Contact Form Builder, AI Forms…
CVE-2026-18402SureDash <= 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition'…brainstormforce SureDash – Community, Courses & Member…
CVE-2026-15821SureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesbrainstormforce SureDash – Community, Courses & Member…
CVE-2026-15787Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu…brainstormforce Ultimate Addons for Elementor
CVE-2026-15288SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulationbrainstormforce SureForms – Drag & Drop Contact Form & Form…
CVE-2026-12900Spectra Gutenberg Blocks <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via uagb/image Blockbrainstormforce Spectra Legacy – Gutenberg Blocks
CVE-2026-0950Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Databrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2025-8488Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to…brainstormforce Ultimate Addons for Elementor
CVE-2025-68497WordPress Astra Widgets plugin <= 1.2.16 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Astra Widgets
CVE-2025-6742SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered…brainstormforce SureForms – Drag and Drop Form Builder for…
CVE-2025-6691SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via…brainstormforce SureForms – Drag and Drop Form Builder for…
CVE-2025-62059WordPress SureRank plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force SureRank
CVE-2025-54685WordPress SureDash Plugin <= 1.1.0 - Sensitive Data Exposure VulnerabilityBrainstorm Force SureDash
CVE-2025-48164WordPress SureDash <= 1.0.3 - Privilege Escalation VulnerabilityBrainstorm Force SureDash
CVE-2025-48088WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerabilityBrainstorm_Force Ultimate Addons for WPBakery Page Builder
CVE-2025-3102SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User…brainstormforce OttoKit: All-in-One Automation Platform
CVE-2025-27007WordPress SureTriggers <= 1.0.82 - Privilege Escalation VulnerabilityBrainstorm Force OttoKit
CVE-2025-24568WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerabilityBrainstorm Force Starter Templates
CVE-2025-1784Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2025-14855SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scriptingbrainstormforce SureForms – Contact Form, Payment Form &…
CVE-2025-14351Custom Fonts – Host Your Fonts Locally <= 2.1.16 - Missing Authorization to Unauthenticated Font Deletionbrainstormforce Custom Fonts – Host Your Fonts Locally
CVE-2025-13516SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers <= 1.9.0 - Unauthenticated…brainstormforce SureMail – SMTP and Email Logs Plugin with…
CVE-2025-13065Starter Templates <= 4.4.41 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypassbrainstormforce Starter Templates – AI-Powered Templates…
CVE-2025-12536SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposurebrainstormforce SureForms – Contact Form, Payment Form &…
CVE-2025-12535SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distributionbrainstormforce SureForms – Contact Form, Payment Form &…
CVE-2025-11814Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingBrainstorm Force Ultimate Addons for WPBakery
CVE-2025-11162Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSSbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2025-10732SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+)…brainstormforce SureForms – Contact Form, Payment Form &…
CVE-2025-10489SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+)…brainstormforce SureForms – Contact Form, Payment Form &…
CVE-2024-7590WordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Spectra
CVE-2024-5757Elementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title…brainstormforce Ultimate Addons for Elementor
CVE-2024-56274WordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Astra Widgets
CVE-2024-5485SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! <= 1.0.46 - Authenticated (Contributor+)…brainstormforce OttoKit: All-in-One Automation Platform
CVE-2024-5255Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via…Brainstorm Force Ultimate Addons for WPBakery
CVE-2024-5254Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via…Brainstorm Force Ultimate Addons for WPBakery
CVE-2024-5253Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via…Brainstorm Force Ultimate Addons for WPBakery
CVE-2024-5252Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via…Brainstorm Force Ultimate Addons for WPBakery
CVE-2024-5251Ultimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via…Brainstorm Force Ultimate Addons for WPBakery
CVE-2024-50439WordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Astra Widgets
CVE-2024-4838ConvertPlus <= 3.5.26 - Authenticated (Contributor+) PHP Object InjectionBrainstorm Force ConvertPlus
CVE-2024-47345WordPress Starter Templates plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Starter Templates
CVE-2024-4634Elementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrainstormforce Ultimate Addons for Elementor
CVE-2024-4632WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 -…brainstormforce CartFlows – Funnel Builder & Checkout…
CVE-2024-4630Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.2.1 - Authenticated (Contributor+) Stored…brainstormforce Starter Templates – AI-Powered Templates…
CVE-2024-4366Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scriptingbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2024-43151WordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.9 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Ultimate Addons for Beaver Builder – Lite
CVE-2024-3828Spectra Pro <= 1.1.5 - Authenticated (Author+) Privilege EscalationBrainstorm Force Spectra Pro
CVE-2024-3827Spectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDsBrainstorm Force Spectra Pro
CVE-2024-37517WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerabilityBrainstorm Force Spectra
CVE-2024-37455WordPress Ultimate Addons for elementor plugin <= 1.36.31 - Privilege Escalation vulnerabilityBrainstorm Force Ultimate Addons for Elementor
CVE-2024-33933WordPress Elementor Header & Footer Builder plugin <= 1.6.35 - Contributor+ DOM-Based Cross Site Scripting (XSS)…Brainstorm Force, Nikhil Chavan Elementor – Header, Footer…
CVE-2024-3240ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object InjectionBrainstorm Force ConvertPlus
CVE-2024-3237ConvertPlug <= 3.5.25 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options UpdateBrainstorm Force ConvertPlus
CVE-2024-3107Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversalbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2024-29768WordPress Astra theme <= 4.6.4 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Astra
CVE-2024-2619Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injectionbrainstormforce Ultimate Addons for Elementor
CVE-2024-2618Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrainstormforce Ultimate Addons for Elementor
CVE-2024-2347Astra <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Namebrainstormforce Astra
CVE-2024-2144Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image…brainstormforce Ultimate Addons for Beaver Builder – Lite
CVE-2024-2143Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…brainstormforce Ultimate Addons for Beaver Builder – Lite
CVE-2024-2142Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info…brainstormforce Ultimate Addons for Beaver Builder – Lite
CVE-2024-2141Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…brainstormforce Ultimate Addons for Beaver Builder – Lite
CVE-2024-2140Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…brainstormforce Ultimate Addons for Beaver Builder – Lite
CVE-2024-1815Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image…brainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2024-1814Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via…brainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2024-1467Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side…brainstormforce Starter Templates – AI-Powered Templates…
CVE-2024-13800Popup Plugin For WordPress - ConvertPlus <= 3.5.30 - Missing Authorization to Authenticated (Subscriber+) Limited…Brainstorm Force ConvertPlus
CVE-2024-1332Custom Fonts – Host Your Fonts Locally <= 2.1.4 - Authenticated (Author+) Stored Cross-Site Scriptingbrainstormforce Custom Fonts – Host Your Fonts Locally
CVE-2024-12713SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post…brainstormforce SureForms – Contact Form, Payment Form &…
CVE-2024-1237Elementor Header & Footer Builder <= 1.6.24 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrainstormforce Ultimate Addons for Elementor
CVE-2024-11230Elementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title…brainstormforce Ultimate Addons for Elementor
CVE-2024-10484Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team…brainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2024-10325Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadbrainstormforce Ultimate Addons for Elementor
CVE-2024-10050Elementor Header & Footer Builder <= 1.6.43 - Authenticated (Contributor+) Information Disclosure via Shortcodebrainstormforce Ultimate Addons for Elementor
CVE-2023-6486Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSSbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2023-51401WordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.13 - Limited Arbitrary File Download vulnerabilityBrainstorm Force Ultimate Addons for Beaver Builder
CVE-2023-51398WordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.14 - Privilege Escalation vulnerabilityBrainstorm Force Ultimate Addons for Beaver Builder
CVE-2023-51397WordPress WP Remote Site Search Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)Brainstorm Force WP Remote Site Search
CVE-2023-51376WordPress ProjectHuddle Client Site plugin <= 1.0.34 - Broken Access Control vulnerabilityBrainstorm Force ProjectHuddle Client Site
CVE-2023-50890WordPress Ultimate Addons for Elementor plugin <= 1.36.20 - Privilege Escalation vulnerabilityBrainstorm Force Ultimate Addons for Elementor
CVE-2023-49833WordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS)Brainstorm Force Spectra – WordPress Gutenberg Blocks
CVE-2023-49830WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)Brainstorm Force Astra Pro
CVE-2023-46211WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)Brainstorm Force Ultimate Addons for WPBakery Page Builder
CVE-2023-46205WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 - Local File Inclusion vulnerabilityBrainstorm Force Ultimate Addons for WPBakery Page Builder
CVE-2023-44151WordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerabilityBrainstorm Force Pre-Publish Checklist
CVE-2023-44148WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerabilityBrainstorm Force Astra Bulk Edit
CVE-2023-41805Broken Access Control vulnerability in multiple Brainstorm Force pluginsBrainstorm Force Starter Templates
CVE-2023-41804WordPress Starter Templates Plugin <= 3.2.4 is vulnerable to Server Side Request Forgery (SSRF)Brainstorm Force Starter Templates — Elementor, WordPress &…
CVE-2023-36685WordPress CartFlows Pro Plugin <= 1.11.12 is vulnerable to Cross Site Request Forgery (CSRF)Brainstorm Force US LLC CartFlows Pro
CVE-2023-36684WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerabilityBrainstorm Force Convert Pro
CVE-2023-36682WordPress Schema Pro Plugin <= 2.7.7 is vulnerable to Cross Site Request Forgery (CSRF)Brainstorm Force US LLC Schema Pro
CVE-2023-36679WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerabilityBrainstorm Force Spectra
CVE-2023-36676WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerabilityBrainstorm Force Spectra
CVE-2023-34370Server Side Request Forgery (SSRF) vulnerability in Starter Templates pluginsBrainstorm Force Premium Starter Templates
CVE-2023-25058WordPress Schema – All In One Schema Rich Snippets Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF)Brainstorm Force Schema – All In One Schema Rich Snippets
CVE-2023-23882WordPress Ultimate Addons for Beaver Builder – Lite Plugin <= 1.5.5 is vulnerable to Broken Access ControlBrainstorm Force Ultimate Addons for Beaver Builder – Lite
CVE-2023-23834WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin…Brainstorm Force Spectra
CVE-2023-23825WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms…Brainstorm Force Spectra
CVE-2023-23738WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing VulnerabilityBrainstorm Force Spectra
CVE-2023-23735WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection VulnerabilityBrainstorm Force Spectra
CVE-2023-23730WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Captcha Bypass VulnerabilityBrainstorm Force Spectra
CVE-2023-23729WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change VulnerabilityBrainstorm Force Spectra
CVE-2022-46851WordPress Starter Templates Plugin <= 3.1.20 is vulnerable to Cross Site Request Forgery (CSRF)Brainstorm Force Starter Templates
CVE-2021-42360Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 Authenticated Block Import to Stored XSSBrainStormForce Starter Templates — Elementor, Gutenberg &…
CVE-2020-36747Lightweight Sidebar Manager <= 1.1.4 - Cross-Site Request Forgery Bypassbrainstormforce Lightweight Sidebar Manager
CVE-2020-36737Import / Export Customizer Settings <= 1.0.3 - Cross-Site Request Forgery Bypassbrainstormforce Import / Export Customizer Settings
CVE-2020-36736WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 -…brainstormforce CartFlows – Funnel Builder & Checkout…
CVE-2020-36702Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorizationbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2019-25151Funnel Builder <= 1.3.0 - Arbitrary Plugin Activationbrainstormforce CartFlows – Funnel Builder & Checkout…
136 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.