CVEs we hold for Brainstormforce
Records whose assigning authority named Brainstormforce as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-7623SureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block Attributebrainstormforce SureForms – Contact Form Builder, AI Forms…
CVE-2026-7465Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function…brainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2026-4987SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id'brainstormforce SureForms – Contact Form, Payment Form &…
CVE-2026-3534Astra <= 4.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Metabrainstormforce Astra
CVE-2026-18406SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payloadbrainstormforce SureForms – Contact Form Builder, AI Forms…
CVE-2026-18402SureDash <= 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition'…brainstormforce SureDash – Community, Courses & Member…
CVE-2026-15821SureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesbrainstormforce SureDash – Community, Courses & Member…
CVE-2026-15787Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu…brainstormforce Ultimate Addons for Elementor
CVE-2026-15288SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulationbrainstormforce SureForms – Drag & Drop Contact Form & Form…
CVE-2026-12900Spectra Gutenberg Blocks <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via uagb/image Blockbrainstormforce Spectra Legacy – Gutenberg Blocks
CVE-2026-0950Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Databrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2025-8488Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to…brainstormforce Ultimate Addons for Elementor
CVE-2025-6742SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered…brainstormforce SureForms – Drag and Drop Form Builder for…
CVE-2025-6691SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via…brainstormforce SureForms – Drag and Drop Form Builder for…
CVE-2025-3102SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User…brainstormforce OttoKit: All-in-One Automation Platform
CVE-2025-1784Spectra – WordPress Gutenberg Blocks <= 2.19.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2025-14855SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scriptingbrainstormforce SureForms – Contact Form, Payment Form &…
CVE-2025-14351Custom Fonts – Host Your Fonts Locally <= 2.1.16 - Missing Authorization to Unauthenticated Font Deletionbrainstormforce Custom Fonts – Host Your Fonts Locally
CVE-2025-13516SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers <= 1.9.0 - Unauthenticated…brainstormforce SureMail – SMTP and Email Logs Plugin with…
CVE-2025-13065Starter Templates <= 4.4.41 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypassbrainstormforce Starter Templates – AI-Powered Templates…
CVE-2025-12536SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposurebrainstormforce SureForms – Contact Form, Payment Form &…
CVE-2025-12535SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distributionbrainstormforce SureForms – Contact Form, Payment Form &…
CVE-2025-11162Spectra <= 2.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom CSSbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2025-10732SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+)…brainstormforce SureForms – Contact Form, Payment Form &…
CVE-2025-10489SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+)…brainstormforce SureForms – Contact Form, Payment Form &…
CVE-2024-5757Elementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title…brainstormforce Ultimate Addons for Elementor
CVE-2024-5485SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! <= 1.0.46 - Authenticated (Contributor+)…brainstormforce OttoKit: All-in-One Automation Platform
CVE-2024-4634Elementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrainstormforce Ultimate Addons for Elementor
CVE-2024-4632WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 -…brainstormforce CartFlows – Funnel Builder & Checkout…
CVE-2024-4630Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.2.1 - Authenticated (Contributor+) Stored…brainstormforce Starter Templates – AI-Powered Templates…
CVE-2024-4366Spectra – WordPress Gutenberg Blocks <= 2.13.0 - Authenticated (Author+) Stored Cross-Site Scriptingbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2024-3107Spectra – WordPress Gutenberg Blocks <= 2.12.6 - Authenticated (Contributor+) Path Traversalbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2024-2619Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injectionbrainstormforce Ultimate Addons for Elementor
CVE-2024-2618Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrainstormforce Ultimate Addons for Elementor
CVE-2024-2347Astra <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Namebrainstormforce Astra
CVE-2024-2144Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image…brainstormforce Ultimate Addons for Beaver Builder – Lite
CVE-2024-2143Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…brainstormforce Ultimate Addons for Beaver Builder – Lite
CVE-2024-2142Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info…brainstormforce Ultimate Addons for Beaver Builder – Lite
CVE-2024-2141Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…brainstormforce Ultimate Addons for Beaver Builder – Lite
CVE-2024-2140Ultimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via…brainstormforce Ultimate Addons for Beaver Builder – Lite
CVE-2024-1815Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image…brainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2024-1814Spectra – WordPress Gutenberg Blocks <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via…brainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2024-1467Starter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.1.6 - Authenticated (Contributor+) Server-Side…brainstormforce Starter Templates – AI-Powered Templates…
CVE-2024-1332Custom Fonts – Host Your Fonts Locally <= 2.1.4 - Authenticated (Author+) Stored Cross-Site Scriptingbrainstormforce Custom Fonts – Host Your Fonts Locally
CVE-2024-12713SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post…brainstormforce SureForms – Contact Form, Payment Form &…
CVE-2024-1237Elementor Header & Footer Builder <= 1.6.24 - Authenticated (Contributor+) Stored Cross-Site Scriptingbrainstormforce Ultimate Addons for Elementor
CVE-2024-11230Elementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title…brainstormforce Ultimate Addons for Elementor
CVE-2024-10484Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team…brainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2024-10325Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadbrainstormforce Ultimate Addons for Elementor
CVE-2024-10050Elementor Header & Footer Builder <= 1.6.43 - Authenticated (Contributor+) Information Disclosure via Shortcodebrainstormforce Ultimate Addons for Elementor
CVE-2023-6486Spectra – WordPress Gutenberg Blocks <= 2.10.3 - Authenticated(Contributor+) Cross-Site Scripting via Custom CSSbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2021-42360Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 Authenticated Block Import to Stored XSSBrainStormForce Starter Templates — Elementor, Gutenberg &…
CVE-2020-36747Lightweight Sidebar Manager <= 1.1.4 - Cross-Site Request Forgery Bypassbrainstormforce Lightweight Sidebar Manager
CVE-2020-36737Import / Export Customizer Settings <= 1.0.3 - Cross-Site Request Forgery Bypassbrainstormforce Import / Export Customizer Settings
CVE-2020-36736WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 -…brainstormforce CartFlows – Funnel Builder & Checkout…
CVE-2020-36702Spectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing Authorizationbrainstormforce Spectra Gutenberg Blocks – Website Builder…
CVE-2019-25151Funnel Builder <= 1.3.0 - Arbitrary Plugin Activationbrainstormforce CartFlows – Funnel Builder & Checkout…
58 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.