Vulnerabilities in brainstormforce
62 resultsCVE-2024-4630MEDIUMStarter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-92294MEDIUMSpectra Gutenberg Blocks <= 2.20.4 - Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification via 'page', 'path', and 'settings' GET ParametersEPSS 0.4%CVE-2024-2144MEDIUMUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator WidgetEPSS 0.4%CVE-2024-2141MEDIUMUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button WidgetEPSS 0.4%CVE-2024-2142MEDIUMUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table WidgetEPSS 0.4%CVE-2020-36702MEDIUMSpectra – WordPress Gutenberg Blocks <= 1.14.7 - Missing AuthorizationEPSS 0.4%CVE-2026-15787MEDIUMUltimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon AttributesEPSS 0.4%CVE-2026-0950MEDIUMSpectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive DataEPSS 0.4%CVE-2024-5757MEDIUMElementor Header & Footer Builder <= 1.6.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Title WidgetEPSS 0.4%CVE-2024-4632MEDIUMWooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-2619MEDIUMElementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML InjectionEPSS 0.4%CVE-2025-14855HIGHSureForms <= 2.2.0 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-4634MEDIUMElementor Header & Footer Builder <= 1.6.28 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-7623MEDIUMSureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block AttributeEPSS 0.4%CVE-2024-5485MEDIUMSureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! <= 1.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trigger Link ShortcodeEPSS 0.4%CVE-2024-2347MEDIUMAstra <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display NameEPSS 0.4%CVE-2024-12713MEDIUMSureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post DisclosureEPSS 0.4%CVE-2026-15821MEDIUMSureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.3%CVE-2026-9065CRITICALSurecart - SQL InjectionEPSS 0.3%CVE-2024-2143MEDIUMUltimate Addons for Beaver Builder – Lite <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading WidgetEPSS 0.3%