Vendor

    Brainstorm Force

    109 known vulnerabilities in products by Brainstorm Force, 0 of them actively exploited (CISA KEV).

    Key figures

    109

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Brainstorm Force
    CriticalCVE-2025-27007

    WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

    		9.8
    CriticalCVE-2026-110372

    WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

    		9.8
    CriticalCVE-2026-112241

    WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability

    		9.8
    HighCVE-2026-96837

    WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability

    		8.8
    CriticalCVE-2026-57401

    WordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerability

    		9.9
    HighCVE-2026-106599

    WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability

    		8.8
    CriticalCVE-2026-49781

    WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2026-87741

    ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameter

    		8.8
    CriticalCVE-2023-49830

    WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)

    also in 1 other product

    		9.9
    HighCVE-2024-3240

    ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection

    		8.8
    HighCVE-2026-80433

    WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability

    		7.5
    HighCVE-2024-3828

    Spectra Pro <= 1.1.5 - Authenticated (Author+) Privilege Escalation

    		8.8
    MediumCVE-2026-110892

    WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability

    		6.5
    HighCVE-2026-112221

    WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2023-51398

    Brainstorm Force Ultimate Addons for Beaver Builder: Improper Privilege Management

    also in 1 other product

    		8.8
    HighCVE-2023-50890

    WordPress Ultimate Addons for Elementor plugin <= 1.36.20 - Privilege Escalation vulnerability

    		8.8
    MediumCVE-2026-115604

    WordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerability

    		5.0
    HighCVE-2026-105874

    WordPress SureCart plugin <= 4.9.3 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-125450

    WordPress SureRank plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-124411

    WordPress SureCart plugin <= 4.12.1 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2024-37455

    WordPress Ultimate Addons for elementor plugin <= 1.36.31 - Privilege Escalation vulnerability

    also in 1 other product

    		8.8
    HighCVE-2025-48164

    WordPress SureDash <= 1.0.3 - Privilege Escalation Vulnerability

    		8.8
    MediumCVE-2026-119520

    WordPress Spectra plugin <= 2.20.4 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-39739

    Brainstorm Force Ultimate Addons for Elementor - Lite: Cross-site Scripting

    		6.5
    MediumCVE-2026-112840

    WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability

    		6.5

    All vulnerabilities in search

    Products

    Products by Brainstorm Force
    Spectra160
    Suredash110
    Starter Templates70
    Surecart70
    Sureforms60
    Ultimate Addons For Wpbakery60
    Cartflows50
    Convertplus50
    Ottokit50
    Ultimate Addons For Wpbakery Page Builder50
    Astra Widgets30
    Presto Player30
    Ultimate Addons For Elementor30