Vulnerabilities in Brainstorm Force
101 resultsCVE-2026-85308MEDIUMWordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2023-23738MEDIUMWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing VulnerabilityEPSS 0.3%CVE-2023-51397MEDIUMWordPress WP Remote Site Search Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-7590MEDIUMWordPress Spectra plugin<= 2.14.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-34370HIGHServer Side Request Forgery (SSRF) vulnerability in Starter Templates pluginsEPSS 0.3%CVE-2023-23882MEDIUMWordPress Ultimate Addons for Beaver Builder – Lite Plugin <= 1.5.5 is vulnerable to Broken Access ControlEPSS 0.3%CVE-2025-68497MEDIUMWordPress Astra Widgets plugin <= 1.2.16 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-56274MEDIUMWordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-11814MEDIUMUltimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-116402MEDIUMWordPress SureForms plugin <= 2.12.9 - Content Injection vulnerabilityEPSS 0.3%CVE-2026-110892MEDIUMWordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-5252MEDIUMUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-5254MEDIUMUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-5253MEDIUMUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-5255MEDIUMUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-5251MEDIUMUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2026-39479HIGHWordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerabilityEPSS 0.3%CVE-2023-23735MEDIUMWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection VulnerabilityEPSS 0.3%CVE-2026-120853MEDIUMWordPress CartFlows plugin <= 3.3.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-3827MEDIUMSpectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDsEPSS 0.3%