IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen

brainstormforce Schwachstellen (CVE)

Für brainstormforce veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

ultimate_addons_for_elementor 12Spectra Gutenberg Blocks – Website Builder for the Block Editor 11SureForms – Contact Form, Payment Form & Other Custom Form Builder 7sureforms 7Ultimate Addons for Beaver Builder – Lite 5SureDash – Community, Courses & Member Dashboard 4Spectra Legacy – Gutenberg Blocks 3CartFlows – Funnel Builder & Checkout Plugin for WooCommerce 3Starter Templates – AI-Powered Templates for Elementor & Gutenberg 3OttoKit: All-in-One Automation Platform 2SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz 2SureForms – Drag and Drop Form Builder for WordPress 2Astra 2Custom Fonts – Host Your Fonts Locally 2spectra 1SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator 1spectra_pro 1SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers 1astra widgets 1starter_templates 1ultimate addons for beaver builder 1convertplug 1Starter Templates — Elementor, Gutenberg & Beaver Builder Templates 1Surecart 1ultimate_addons_for_wpbakery_page_builder 1Import / Export Customizer Settings 1Lightweight Sidebar Manager 1
74 Ergebnisse
6.5Mittel
CVE-2026-92294

Spectra Gutenberg Blocks <= 2.20.4 - Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification via 'page', 'path', and 'settings' GET Parameters

brainstormforce Spectra Legacy – Gutenberg Blocks

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the '__construct' function in all versions up to, and including, 2.20.4 This makes it p…

6.4Mittel
CVE-2026-102774

SureDash <= 1.12.1 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content

brainstormforce SureDash – Community, Courses & Member Dashboard

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content in all versions up to, and including, 1.12.1 due to insufficient input sanitiz…

6.4Mittel
CVE-2026-18402

SureDash <= 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute

brainstormforce SureDash – Community, Courses & Member Dashboard

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute in all versions up to, and including, 1.10.3 due to insufficient input sanitization an…

6.4Mittel
CVE-2026-7623

SureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block Attribute

brainstormforce SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headingWrapper' parameter in all versions up to, and including, 2.8.1 due to insufficient input sanitization and …

6.4Mittel
CVE-2026-15787

Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes

brainstormforce Ultimate Addons for Elementor

The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes in all versions up to, and including, 2.9.1 due to insufficient input sanitization and o…

7.5Hoch
CVE-2026-15288

SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulation

brainstormforce SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 2.2.1. This is due to the plugin accepting the payment amount directly from user-controlled POST dat…

8.8Hoch
CVE-2026-7465

Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-level access an…

1.2%EPSS
9.3Kritisch
CVE-2026-9065

Surecart - SQL Injection

brainstormforce Surecart

SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameters ('model_name', 'model_id', 'integration_id', 'provider') on the REST API endpoint '/surecart/v1/integrations/{id}'. The root cause is a flawed escaping bypa…

7.2Hoch
CVE-2025-14855

SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting

brainstormforce SureForms – Contact Form, Payment Form & Other Custom Form Builder

The SureForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form field parameters in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated at…

8.1Hoch
CVE-2025-13516

SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers <= 1.9.0 - Unauthenticated Arbitrary File Upload

brainstormforce SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers

The SureMail – SMTP and Email Logs Plugin for WordPress is vulnerable to Unrestricted Upload of File with Dangerous Type in versions up to and including 1.9.0. This is due to the plugin's save_file() function in inc/emails/handler/uploads.php which duplicates…

1.0%EPSS
4.3Mittel
CVE-2025-10732

SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure

brainstormforce SureForms – Contact Form, Payment Form & Other Custom Form Builder

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.12.1. This is due to improper access control implementation on the '/wp-json/sureforms/v1/s…