Login Request a demo
BF
Vendor
Brainstorm Force
33 products with CVEs on record
97
CVEs
0
On KEV
21
New 30D
Products
SU
SureCart
Brainstorm Force
9.8
6 CVEs0 on KEV6 new
SU
SureDash
Brainstorm Force
9.9
10 CVEs0 on KEV5 new
OT
OttoKit
Brainstorm Force
9.8
5 CVEs0 on KEV1 new
SU
SureForms
Brainstorm Force
6.5
4 CVEs0 on KEV3 new
ST
Starter Templates
Brainstorm Force
6.5
6 CVEs0 on KEV2 new
PP
Presto Player
Brainstorm Force
6.5
3 CVEs0 on KEV2 new
CA
CartFlows
Brainstorm Force
8.8
3 CVEs0 on KEV1 new
AW
Astra WordPress Theme
Brainstorm Force
2.7
1 CVEs0 on KEV1 new
SP
Spectra
Brainstorm Force
9.8
12 CVEs0 on KEV0 new
UA
Ultimate Addons for WPBakery
Brainstorm Force
6.4
6 CVEs0 on KEV0 new
CO
ConvertPlus
Brainstorm Force
8.8
5 CVEs0 on KEV0 new
UA
Ultimate Addons for WPBakery Page Builder
Brainstorm_Force
7.1
5 CVEs0 on KEV0 new
AW
Astra Widgets
Brainstorm Force
5.9
3 CVEs0 on KEV0 new
UA
Ultimate Addons for Elementor
Brainstorm Force
8.8
3 CVEs0 on KEV0 new
AB
Astra Bulk Edit
Brainstorm Force
8.8
2 CVEs0 on KEV0 new
PS
Premium Starter Templates
Brainstorm Force
7.1
2 CVEs0 on KEV0 new
SP
Spectra Pro
Brainstorm Force
8.8
2 CVEs0 on KEV0 new
ST
Starter Templates — Elementor, WordPress & Beaver Builder Templates
Brainstorm Force
7.1
2 CVEs0 on KEV0 new
UA
Ultimate Addons for Beaver Builder
Brainstorm Force
8.8
2 CVEs0 on KEV0 new
UA
Ultimate Addons for Beaver Builder – Lite
Brainstorm Force
5.4
2 CVEs0 on KEV0 new
AS
Astra
Brainstorm Force
5.9
1 CVEs0 on KEV0 new
AP
Astra Pro
Brainstorm Force
8.8
1 CVEs0 on KEV0 new
CP
Convert Pro
Brainstorm Force
9.8
1 CVEs0 on KEV0 new
PC
Pre-Publish Checklist
Brainstorm Force
8.8
1 CVEs0 on KEV0 new
PC
ProjectHuddle Client Site
Brainstorm Force
4.3
1 CVEs0 on KEV0 new
SI
Sigmize
Brainstorm Force
4.3
1 CVEs0 on KEV0 new
SW
Spectra – WordPress Gutenberg Blocks
Brainstorm Force
5.4
1 CVEs0 on KEV0 new
SC
SureFeedback Client Site
Brainstorm Force
7.5
1 CVEs0 on KEV0 new
SP
SureForms Pro
Brainstorm Force
7.3
1 CVEs0 on KEV0 new
SU
SureMembers
Brainstorm Force
5.3
1 CVEs0 on KEV0 new
SU
SureRank
Brainstorm Force
7.1
1 CVEs0 on KEV0 new
WC
WooCommerce Cart Abandonment Recovery
Brainstorm Force
7.2
1 CVEs0 on KEV0 new
WR
WP Remote Site Search
Brainstorm Force
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115605
New
SU
SureDash
Brainstorm Force
4.3–Oct 29WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerability
CVE-2026-110881
New
SU
SureDash
Brainstorm Force
6.5–Oct 29WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-116387
New
SU
SureForms
Brainstorm Force
5.3–Oct 29WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability
CVE-2026-116402
New
SU
SureForms
Brainstorm Force
5.3–Oct 29WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability
CVE-2026-110892
New
SU
SureDash
Brainstorm Force
6.5
0%
Oct 24WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
CVE-2026-112241
SU
SureCart
Brainstorm Force
9.8
0%
Oct 22WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability
CVE-2026-110893
SU
SureDash
Brainstorm Force
5.3
0%
Oct 22WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
CVE-2026-110894
SU
SureDash
Brainstorm Force
5.3
0%
Oct 22WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
CVE-2026-112221
SU
SureCart
Brainstorm Force
7.1
0%
Oct 21WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-112840
SU
SureCart
Brainstorm Force
6.5
0%
Oct 20WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-110372
OT
OttoKit
Brainstorm Force
9.8
1%
Oct 18WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
CVE-2026-109893
PP
Presto Player
Brainstorm Force
6.5
0%
Oct 15WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105874
SU
SureCart
Brainstorm Force
7.1
0%
Oct 14WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-106599
SU
SureCart
Brainstorm Force
8.8
0%
Oct 14WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability
CVE-2026-109697
SU
SureCart
Brainstorm Force
6.5
0%
Oct 13WordPress SureCart plugin <= 4.9.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-108495
SU
SureForms
Brainstorm Force
6.5
0%
Oct 13WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39721
ST
Starter Templates
Brainstorm Force
5.4
0%
Oct 5WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability
CVE-2026-102393
ST
Starter Templates
Brainstorm Force
6.5
0%
Oct 5WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102914
PP
Presto Player
Brainstorm Force
6.5
0%
Oct 5WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96837
CA
CartFlows
Brainstorm Force
8.8
1%
Sep 30WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability
CVE-2026-27085
AW
Astra WordPress Theme
Brainstorm Force
2.7
0%
Sep 30WordPress Astra WordPress theme theme <= 4.13.12 - Content Injection vulnerability
CVE-2026-87741
CO
ConvertPlus
Brainstorm Force
8.8
0%
Sep 28ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameter
CVE-2026-62134
ST
Starter Templates
Brainstorm Force
4.3
0%
Sep 11WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-85308
SU
SureForms
Brainstorm Force
5.3
0%
Sep 3WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-80433
SC
SureFeedback Client Site
Brainstorm Force
7.5
0%
Aug 27WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability
CVE-2026-32553
OT
OttoKit
Brainstorm Force
7.2
0%
Aug 18WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-66698
SU
SureDash
Brainstorm Force
7.1
0%
Aug 13WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66688
UA
Ultimate Addons for Elementor
Brainstorm Force
6.5
0%
Aug 6WordPress Ultimate Addons for Elementor plugin <= 1.45.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57401
SU
SureDash
Brainstorm Force
9.9
1%
Jul 13WordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerability
CVE-2026-54813
SU
SureDash
Brainstorm Force
8.5
0%
Jun 17WordPress SureDash plugin <= 1.8.0 - SQL Injection vulnerability
CVE-2026-49781
OT
OttoKit
Brainstorm Force
9.8
0%
Jun 15WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability
CVE-2026-39470
WC
WooCommerce Cart Abandonment Recovery
Brainstorm Force
7.2
0%
Jun 15WordPress WooCommerce Cart Abandonment Recovery plugin < 2.1.0 - Privilege Escalation vulnerability
CVE-2026-45442
PP
Presto Player
Brainstorm Force
4.3
0%
May 19WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability
CVE-2026-42648
SP
Spectra
Brainstorm Force
4.3
0%
Apr 29WordPress Spectra plugin <= 2.19.22 - Broken Access Control vulnerability
CVE-2026-42377
SP
SureForms Pro
Brainstorm Force
7.3
0%
Apr 29WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerability
CVE-2026-39479
OT
OttoKit
Brainstorm Force
7.6
0%
Apr 8WordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerability
CVE-2026-39477
CA
CartFlows
Brainstorm Force
4.3
0%
Apr 8WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability
CVE-2026-34889
UA
Ultimate Addons for WPBakery Page Builder
Brainstorm Force
6.5
0%
Apr 1WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32431
AB
Astra Bulk Edit
Brainstorm Force
6.5
0%
Mar 13WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
CVE-2026-28038
UA
Ultimate Addons for WPBakery Page Builder
Brainstorm_Force
6.5
0%
Mar 5WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.21.1 - Broken Access Control vulnerability
CVE-2026-25316
CA
CartFlows
Brainstorm Force
7.2
0%
Feb 19WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerability
CVE-2026-24982
SP
Spectra
Brainstorm Force
5.3
0%
Feb 3WordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerability
CVE-2026-24962
SI
Sigmize
Brainstorm Force
4.3
0%
Feb 3WordPress Sigmize plugin <= 0.0.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-68497
AW
Astra Widgets
Brainstorm Force
5.9
0%
Dec 24WordPress Astra Widgets plugin <= 1.2.16 - Cross Site Scripting (XSS) vulnerability
CVE-2023-23729
SP
Spectra
Brainstorm Force
5.4
0%
Dec 9WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change Vulnerability
CVE-2025-62059
SU
SureRank
Brainstorm Force
7.1
0%
Nov 6WordPress SureRank plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-48088
UA
Ultimate Addons for WPBakery Page Builder
Brainstorm_Force
6.5
0%
Oct 27WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-11814
UA
Ultimate Addons for WPBakery
Brainstorm Force
6.4
0%
Oct 16Ultimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-48164
SU
SureDash
Brainstorm Force
8.8
0%
Aug 20WordPress SureDash <= 1.0.3 - Privilege Escalation Vulnerability
CVE-2025-54685
SU
SureDash
Brainstorm Force
6.5
0%
Aug 14WordPress SureDash Plugin <= 1.1.0 - Sensitive Data Exposure Vulnerability
CVE-2025-27007
OT
OttoKit
Brainstorm Force
9.8
54%
May 1WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability
CVE-2024-12434
SU
SureMembers
Brainstorm Force
5.3
1%
Feb 26SureMembers <= 1.10.6 - Sensitive Information Exposure
CVE-2024-13800
CO
ConvertPlus
Brainstorm Force
8.1
0%
Feb 12Popup Plugin For WordPress - ConvertPlus <= 3.5.30 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
CVE-2025-24568
ST
Starter Templates
Brainstorm Force
4.3
0%
Jan 24WordPress Starter Templates plugin <= 4.4.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-56274
AW
Astra Widgets
Brainstorm Force
5.4
0%
Jan 7WordPress Astra Widgets plugin <= 1.2.15 - Cross Site Scripting (XSS) vulnerability
CVE-2023-23825
SP
Spectra
Brainstorm Force
8.8
1%
Dec 9WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerability
CVE-2023-23834
SP
Spectra
Brainstorm Force
9.8
1%
Dec 9WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerability
CVE-2024-37517
SP
Spectra
Brainstorm Force
8.8
0%
Nov 1WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability
CVE-2024-50439
AW
Astra Widgets
Brainstorm Force
5.4
0%
Oct 28WordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-47345
ST
Starter Templates
Brainstorm Force
5.9
0%
Oct 6WordPress Starter Templates plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerability