İçeriğe atla
Noroxi

brainstormforce kayıtları

brainstormforce üreticisine ait 81 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%49,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 23
  5. 24
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

81 kayıt
  • CVE-2021-24507
    42Planlayın

    Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    brainstormforce · astra9 Ağu 2021

  • CVE-2023-23834
    39İzleyin

    WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Activate_Plugin vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    brainstormforce · spectra9 Ara 2024

  • CVE-2023-36684
    39İzleyin

    WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    brainstormforce · convert pro19 Haz 2024

  • CVE-2024-3240
    35İzleyin

    ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    brainstorm force · convertplus4 May 2024

  • CVE-2023-49830
    35İzleyin

    WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)

    YüksekCVSS 8,8İstismar yokEPSS %1

    brainstormforce · astra29 Ara 2023

  • CVE-2024-3828
    35İzleyin

    Spectra Pro <= 1.1.5 - Authenticated (Author+) Privilege Escalation

    YüksekCVSS 8,8İstismar yokEPSS %1

    brainstorm force · spectra pro14 May 2024

  • CVE-2023-23825
    35İzleyin

    WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Broken Access Control + CSRF on Import_WPforms vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    brainstormforce · spectra9 Ara 2024

  • CVE-2023-50890
    35İzleyin

    WordPress Ultimate Addons for Elementor plugin <= 1.36.20 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    brainstorm force · ultimate addons for elementor17 May 2024

  • CVE-2023-51398
    35İzleyin

    WordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.14 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    brainstormforce · ultimate addons for beaver builder17 May 2024

  • CVE-2024-37455
    35İzleyin

    WordPress Ultimate Addons for elementor plugin <= 1.36.31 - Privilege Escalation vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    brainstormforce · ultimate addons for elementor9 Tem 2024

  • CVE-2023-36676
    35İzleyin

    WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    brainstormforce · spectra19 Haz 2024

  • CVE-2024-37517
    35İzleyin

    WordPress Spectra plugin <= 2.13.7 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    brainstormforce · spectra1 Kas 2024

  • CVE-2023-44148
    35İzleyin

    WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    brainstormforce · astra19 Haz 2024

  • CVE-2023-44151
    35İzleyin

    WordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    brainstormforce · pre-publish checklist19 Haz 2024

  • CVE-2023-36685
    35İzleyin

    WordPress CartFlows Pro Plugin <= 1.11.12 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    brainstormforce · cartflows30 Kas 2023

  • CVE-2023-36682
    35İzleyin

    WordPress Schema Pro Plugin <= 2.7.7 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    brainstormforce · schema30 Kas 2023

  • CVE-2022-46851
    35İzleyin

    WordPress Starter Templates Plugin <= 3.1.20 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    brainstormforce · starter templates23 May 2023

  • CVE-2023-25058
    35İzleyin

    WordPress Schema – All In One Schema Rich Snippets Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    brainstormforce · schema26 May 2023

  • CVE-2023-51402
    35İzleyin

    WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    brainstormforce · ultimate addons for wpbakery page builder29 Ara 2023

  • CVE-2025-6691
    32İzleyin

    SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion

    YüksekCVSS 8,1İstismar yokEPSS %1

    brainstormforce · sureforms9 Tem 2025

  • CVE-2025-6742
    30İzleyin

    SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion

    YüksekCVSS 7,5İstismar yokEPSS %1

    brainstormforce · sureforms9 Tem 2025

  • CVE-2020-13125
    27İzleyin

    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in c

    OrtaCVSS 6,5Kavram kanıtıEPSS %2

    brainstormforce · ultimate addons for elementor16 May 2020

  • CVE-2023-51401
    26İzleyin

    WordPress Ultimate Addons for Beaver Builder Premium plugin <= 1.35.13 - Limited Arbitrary File Download vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %1

    brainstormforce · ultimate addons for beaver builder17 May 2024

  • CVE-2023-41805
    26İzleyin

    Broken Access Control vulnerability in multiple Brainstorm Force plugins

    OrtaCVSS 6,5İstismar yokEPSS %0

    brainstormforce · starter templates19 Haz 2024

  • CVE-2023-36679
    26İzleyin

    WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %0

    brainstormforce · spectra28 Mar 2024