brainstormforce Vulnerability Advisory Catalog

Total 77 security vulnerabilities recorded for brainstormforce software and firmware.

← Back to All Vendors
CVE-2024-2144 MEDIUM
Component: ultimate_addons_for_beaver_builder

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Separator widget in all ...

📅 2024-03-30
CVSS 6.4 Dossier →
CVE-2024-2143 MEDIUM
Component: ultimate_addons_for_beaver_builder

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all versions...

📅 2024-03-30
CVSS 6.4 Dossier →
CVE-2024-2142 MEDIUM
Component: ultimate_addons_for_beaver_builder

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Info Table widget in all versi...

📅 2024-03-30
CVSS 6.4 Dossier →
CVE-2024-2141 MEDIUM
Component: ultimate_addons_for_beaver_builder

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget in all versions ...

📅 2024-03-30
CVSS 6.4 Dossier →
CVE-2024-2140 MEDIUM
Component: ultimate_addons_for_beaver_builder

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Icons widget in all v...

📅 2024-03-30
CVSS 6.4 Dossier →
Component: spectra

Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6....

📅 2024-03-28
CVSS 7.1 Dossier →
CVE-2024-1564 MEDIUM
Component: schema

The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardl...

📅 2024-03-25
CVSS 4.3 Dossier →
CVE-2024-1237 MEDIUM
Component: elementor_header_\&_footer_builder

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the flyout_layout attribute in all version...

📅 2024-03-13
CVSS 6.4 Dossier →
Component: ultimate_addons_for_beaver_builder

Missing Authorization vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite.This issue affects Ultimate Addons for Beaver Builde...

📅 2024-01-17
CVSS 4.3 Dossier →
Component: ultimate_addons_for_wpbakery_page_builder

Cross-Site Request Forgery (CSRF) vulnerability in Brain Storm Force Ultimate Addons for WPBakery Page Builder.This issue affects Ultimate Addons for ...

📅 2023-12-29
CVSS 4.3 Dossier →
Component: wp_remote_site_search

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force WP Remote Site Search allows St...

📅 2023-12-29
CVSS 6.5 Dossier →
CVE-2023-49830 CRITICAL
Component: astra

Improper Control of Generation of Code ('Code Injection') vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4...

📅 2023-12-29
CVSS 9.9 Dossier →
Component: spectra

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectra – WordPress Gutenberg B...

📅 2023-12-14
CVSS 6.5 Dossier →
Component: starter_templates

Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates.This issue af...

📅 2023-12-07
CVSS 7.1 Dossier →
Component: cartflows

Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force US LLC CartFlows Pro allows Cross Site Request Forgery.This issue affects CartFlow...

📅 2023-11-30
CVSS 4.3 Dossier →
Component: schema

Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force US LLC Schema Pro allows Cross Site Request Forgery.This issue affects Schema Pro:...

📅 2023-11-30
CVSS 7.1 Dossier →
Component: ultimate_addons_for_wpbakery_page_builder

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 v...

📅 2023-10-27
CVSS 6.5 Dossier →
Component: lightweight_sidebar_manager

The Lightweight Sidebar Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.4. This is due ...

📅 2023-07-01
CVSS 4.3 Dossier →
Component: import_\/_export_customizer_settings

The Import / Export Customizer Settings plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.3. This...

📅 2023-07-01
CVSS 4.3 Dossier →
Component: spectra

The Ultimate Addons for Gutenberg plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 1.14.7. This i...

📅 2023-06-07
CVSS 5.5 Dossier →
Component: schema

Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Schema – All In One Schema Rich Snippets plugin <= 1.6.5 versions....

📅 2023-05-26
CVSS 4.3 Dossier →
Component: starter_templates

Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Starter Templates plugin <= 3.1.20 versions....

📅 2023-05-23
CVSS 4.3 Dossier →
Component: spectra

The Spectra WordPress plugin before 1.15.0 does not sanitize user input as it reaches its style HTML attribute, allowing contributors to conduct store...

📅 2023-02-21
CVSS 5.4 Dossier →
Component: starter_templates

On sites that also had the Elementor plugin for WordPress installed, it was possible for users with the edit_posts capability, which includes Contribu...

📅 2021-11-17
CVSS 7.6 Dossier →
Page 3 of 4 (77 Total Records)