brainstormforce vulnerabilities

Recent CVEs affecting brainstormforce products. 33 tracked.

brainstormforce has 33 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 33. Most recent: 2025-08-01. Highest priority: CVE-2025-6691 (score 44/100).

CVE-2025-6742 HIGH 7.5 UPGRADE The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Inje
CVE-2025-6691 HIGH 8.1 UPGRADE The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file
CVE-2025-5921 MEDIUM 5.8 UPGRADE The SureForms WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it bac
CVE-2025-3514 LOW 3.5 UPGRADE The SureForms WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which cou
CVE-2025-3513 LOW 3.5 UPGRADE The SureForms WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which cou
CVE-2025-3471 MEDIUM 4.9 UPGRADE The SureForms WordPress plugin before 1.4.4 does not have proper authorisation check when updating its settin
CVE-2024-7590 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainsto
CVE-2024-5757 MEDIUM 6.4 UPGRADE The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th
CVE-2024-5255 MEDIUM 6.4 UPGRADE The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
CVE-2024-5254 MEDIUM 6.4 UPGRADE The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
CVE-2024-5253 MEDIUM 6.4 UPGRADE The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
CVE-2024-5252 MEDIUM 6.4 UPGRADE The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
CVE-2024-5251 MEDIUM 6.4 UPGRADE The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu
CVE-2024-56274 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainsto
CVE-2024-50439 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainsto
CVE-2024-43151 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in B
CVE-2024-37517 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Acces
CVE-2024-37455 HIGH 8.8 UPGRADE Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege
CVE-2024-37278 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in P
CVE-2024-33933 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in B
CVE-2024-12713 MEDIUM 5.3 UPGRADE The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exp
CVE-2024-11230 MEDIUM 6.4 UPGRADE The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th
CVE-2024-10484 MEDIUM 6.4 UPGRADE The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
CVE-2024-10325 MEDIUM 6.4 UPGRADE The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via RE
CVE-2024-10050 MEDIUM 4.3 UPGRADE The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Information Disclosure in all vers
CVE-2023-51376 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHu
CVE-2023-44151 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish C
CVE-2023-44148 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in Brainstorm Force Astra Bulk Edit.This issue affects Astra Bulk Edit: fr
CVE-2023-41805 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Te
CVE-2023-36684 HIGH 7.1 UPGRADE Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a t
CVE-2023-36676 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2
CVE-2023-23834 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Acces
CVE-2023-23825 LOW 3.1 UPGRADE Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Acces

FAQ

How do I fix brainstormforce vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is brainstormforce being exploited right now?

None of the tracked brainstormforce CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which brainstormforce CVE should I patch first?

CVE-2025-6691 currently ranks highest (44/100): The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file .

Products

RSS feed for brainstormforce · ← Back to latest CVEs