Skip to content
Noroxi

brainstormforce records

81 published records for vendor brainstormforce.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
49.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 23
  5. 24
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

81 records
  • CVE-2021-24507
    42Plan

    Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    brainstormforce · astraAug 9, 2021

  • CVE-2023-23834
    39Monitor

    WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    brainstormforce · spectraDec 9, 2024

  • CVE-2023-36684
    39Monitor

    WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    brainstormforce · convert proJun 19, 2024

  • CVE-2024-3240
    35Monitor

    ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection

    HighCVSS 8.8No exploitEPSS 1%

    brainstorm force · convertplusMay 4, 2024

  • CVE-2023-49830
    35Monitor

    WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)

    HighCVSS 8.8No exploitEPSS 1%

    brainstormforce · astraDec 29, 2023

  • CVE-2024-3828
    35Monitor

    Spectra Pro <= 1.1.5 - Authenticated (Author+) Privilege Escalation

    HighCVSS 8.8No exploitEPSS 1%

    brainstorm force · spectra proMay 14, 2024

  • CVE-2023-23825
    35Monitor

    WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    brainstormforce · spectraDec 9, 2024

  • CVE-2023-50890
    35Monitor

    WordPress Ultimate Addons for Elementor plugin <= 1.36.20 - Privilege Escalation vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    brainstorm force · ultimate addons for elementorMay 17, 2024

  • CVE-2023-51398
    35Monitor

    WordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.14 - Privilege Escalation vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    brainstormforce · ultimate addons for beaver builderMay 17, 2024

  • CVE-2024-37455
    35Monitor

    WordPress Ultimate Addons for elementor plugin <= 1.36.31 - Privilege Escalation vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · ultimate addons for elementorJul 9, 2024

  • CVE-2023-36676
    35Monitor

    WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · spectraJun 19, 2024

  • CVE-2024-37517
    35Monitor

    WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · spectraNov 1, 2024

  • CVE-2023-44148
    35Monitor

    WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · astraJun 19, 2024

  • CVE-2023-44151
    35Monitor

    WordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · pre-publish checklistJun 19, 2024

  • CVE-2023-36685
    35Monitor

    WordPress CartFlows Pro Plugin <= 1.11.12 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · cartflowsNov 30, 2023

  • CVE-2023-36682
    35Monitor

    WordPress Schema Pro Plugin <= 2.7.7 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · schemaNov 30, 2023

  • CVE-2022-46851
    35Monitor

    WordPress Starter Templates Plugin <= 3.1.20 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · starter templatesMay 23, 2023

  • CVE-2023-25058
    35Monitor

    WordPress Schema – All In One Schema Rich Snippets Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · schemaMay 26, 2023

  • CVE-2023-51402
    35Monitor

    WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · ultimate addons for wpbakery page builderDec 29, 2023

  • CVE-2025-6691
    32Monitor

    SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion

    HighCVSS 8.1No exploitEPSS 1%

    brainstormforce · sureformsJul 9, 2025

  • CVE-2025-6742
    30Monitor

    SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion

    HighCVSS 7.5No exploitEPSS 1%

    brainstormforce · sureformsJul 9, 2025

  • CVE-2020-13125
    27Monitor

    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in c

    MediumCVSS 6.5Proof of conceptEPSS 2%

    brainstormforce · ultimate addons for elementorMay 16, 2020

  • CVE-2023-51401
    26Monitor

    WordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.13 - Limited Arbitrary File Download vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    brainstormforce · ultimate addons for beaver builderMay 17, 2024

  • CVE-2023-41805
    26Monitor

    Broken Access Control vulnerability in multiple Brainstorm Force plugins

    MediumCVSS 6.5No exploitEPSS 0%

    brainstormforce · starter templatesJun 19, 2024

  • CVE-2023-36679
    26Monitor

    WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    brainstormforce · spectraMar 28, 2024