Brainstorm Force vulnerabilities, page 4
87 vulnerabilities
Known vulnerabilities in Brainstorm Force products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 34 products.
CVE-2026-34889brainstorm forceultimate addons for wpbakery page builder+1
EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows DOM-Based XSS.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a before 3.21.4.CVE-2026-85308brainstorm forcesureforms+1EPSS score0.34%
Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects SureForms: from n/a through 2.12.5.CVE-2023-41805brainstorm forcepremium starter templates+4EPSS score0.40%
Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects Premium Starter Templates: from n/a through 3.2.5; Starter Templates: from n/a through 3.2.5.CVE-2023-41804brainstorm forcestarter templates — elementor, wordpress & beaver builder templates+3EPSS score0.40%
Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4.CVE-2023-51397brainstorm forcewp remote site search+2EPSS score0.33%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force WP Remote Site Search allows Stored XSS.This issue affects WP Remote Site Search: from n/a through 1.0.4.CVE-2023-51398brainstorm forceultimate addons for beaver builder+2EPSS score0.55%
Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Privilege Escalation.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.14.CVE-2023-51376brainstorm forceprojecthuddle client site+2EPSS score0.28%
Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34.CVE-2023-51401brainstorm forceultimate addons for beaver builder+2EPSS score0.56%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Relative Path Traversal.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.13.CVE-2023-36684brainstorm forceconvert pro+2EPSS score0.57%
Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a through 1.7.5.CVE-2023-36676brainstorm forcespectra+2EPSS score0.46%
Missing Authorization vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6.CVE-2023-36679brainstorm forcespectra+2EPSS score0.40%
Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6.CVE-2023-25058brainstorm forceschema – all in one schema rich snippets+2EPSS score0.26%
Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Schema – All In One Schema Rich Snippets plugin <= 1.6.5 versions.CVE-2023-46205brainstorm forceultimate addons for wpbakery page builder+1EPSS score0.51%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows PHP Local File Inclusion.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.14.CVE-2023-46211brainstorm forceultimate addons for wpbakery page builder+2EPSS score0.31%
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 versions.CVE-2023-44151brainstorm forcepre-publish checklist+2EPSS score0.35%
Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1.CVE-2023-44148brainstorm forceastra bulk edit+2EPSS score0.39%
Missing Authorization vulnerability in Brainstorm Force Astra Bulk Edit.This issue affects Astra Bulk Edit: from n/a through 1.2.7.CVE-2023-49833brainstorm forcespectra – wordpress gutenberg blocks+2EPSS score0.56%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectra – WordPress Gutenberg Blocks allows Stored XSS.This issue affects Spectra – WordPress Gutenberg Blocks: from n/a through 2.7.9.CVE-2023-49830brainstorm forceastra pro+2EPSS score0.66%
Improper Control of Generation of Code ('Code Injection') vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1.CVE-2023-34370brainstorm forcepremium starter templates+1EPSS score0.32%
Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premium Starter Templates: from n/a through 3.2.4.CVE-2023-50890brainstorm forceultimate addons for elementor+1EPSS score0.55%
Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege Escalation.This issue affects Ultimate Addons for Elementor: from n/a through 1.36.20.