Vendor

    Brainstorm Force

    113 known vulnerabilities in products by Brainstorm Force, 0 of them actively exploited (CISA KEV).

    Key figures

    113

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Brainstorm Force
    HighCVE-2025-13065

    Starter Templates <= 4.4.41 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass

    		8.8
    HighCVE-2025-3102

    BrainStormForce OttoKit: Incorrect Comparison

    		8.1
    CriticalCVE-2021-24507

    Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection

    		9.8
    HighCVE-2026-7465

    Improper Privilege Management (CVE-2026-7465)

    		8.8
    HighCVE-2026-123769

    Improper Privilege Management (CVE-2026-123769)

    		8.8
    HighCVE-2020-13125

    Ultimate Addons for Elementor: security vulnerability

    		7.2
    HighCVE-2025-13516

    Unrestricted Upload of File with Dangerous Type (CVE-2025-13516)

    		8.1
    HighCVE-2025-6691

    BrainStormForce SureForms: External Control of File Name or Path

    		8.1
    HighCVE-2026-4987

    SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id'

    		7.5
    CriticalCVE-2023-49830

    WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)

    also in 1 other product

    		9.9
    MediumCVE-2026-92294

    Brainstorm Force Spectra Legacy: Missing Authorization

    		6.5
    HighCVE-2026-18406

    Cross-site Scripting (CVE-2026-18406)

    		7.2
    HighCVE-2026-15288

    Improper Input Validation (CVE-2026-15288)

    		7.5
    CriticalCVE-2026-9065

    Surecart - SQL Injection

    		—
    HighCVE-2023-51398

    Brainstorm Force Ultimate Addons for Beaver Builder: Improper Privilege Management

    also in 1 other product

    		8.8
    MediumCVE-2025-12536

    SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    		5.3
    HighCVE-2025-6742

    BrainStormForce SureForms: Deserialization of Untrusted Data

    		7.5
    MediumCVE-2026-102774

    Cross-site Scripting (CVE-2026-102774)

    		6.4
    HighCVE-2024-37455

    WordPress Ultimate Addons for elementor plugin <= 1.36.31 - Privilege Escalation vulnerability

    also in 1 other product

    		8.8
    MediumCVE-2026-15787

    BrainStormForce Ultimate Addons for Elementor: Cross-site Scripting

    		6.4
    MediumCVE-2026-96870

    Cross-site Scripting (CVE-2026-96870)

    		6.4
    MediumCVE-2026-7623

    Cross-site Scripting (CVE-2026-7623)

    		6.4
    MediumCVE-2026-18402

    Cross-site Scripting (CVE-2026-18402)

    		6.4
    MediumCVE-2018-20977

    Brainstorm Force Schema – All In One Schema Rich Snippets: Cross-Site Scripting (XSS)

    		6.1
    CriticalCVE-2023-36684

    WordPress Convert Pro plugin <= 1.7.5 - Broken Access Control vulnerability

    also in 1 other product

    		7.1

    All vulnerabilities in search

    Products

    Products by Brainstorm Force
    Brainstorm Force Spectra180
    Ultimate Addons For Elementor130
    Spectra Gutenberg Blocks – Website Builder For The Block Editor110
    Ultimate Addons for Beaver Builder90
    Brainstorm Force Ultimate Addons for WPBakery70
    Elementor Header \& Footer Builder70
    SureForms70
    Sureforms – Contact Form, Payment Form & Other Custom Form Builder70
    Astra50
    Suredash – Community, Courses & Member Dashboard50
    Ultimate Addons For Beaver Builder – Lite50
    Brainstorm Force Schema40
    Brainstorm Force Starter Templates40
    Cartflows – Funnel Builder & Checkout Plugin For Woocommerce30
    Elementor - Header\, Footer \& Blocks Template30
    Spectra Legacy – Gutenberg Blocks30
    Starter Templates – Ai-powered Templates For Elementor & Gutenberg30