[ Vendor · 17 CVEs ]
Brainstorm Force
CVEs affecting Brainstorm Force published in the last 30 days, plus any Brainstorm Force CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112241 | 22 Oct 2026 | CVSS 9.8 | Brainstorm Force SureCartAuthentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from… | |
| CVE-2026-110893 | 22 Oct 2026 | CVSS 5.3 | Brainstorm Force SureDashMissing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-110894 | 22 Oct 2026 | CVSS 5.3 | Brainstorm Force SureDashMissing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security… | |
| CVE-2026-112221 | 21 Oct 2026 | CVSS 7.1 | Brainstorm Force SureCartImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows… | |
| CVE-2026-112840 | 20 Oct 2026 | CVSS 6.5 | Brainstorm Force SureCartImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows… | |
| CVE-2026-110372 | 18 Oct 2026 | CVSS 9.8 | Brainstorm Force OttoKitIncorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from… | |
| CVE-2026-109893 | 15 Oct 2026 | CVSS 6.5 | Brainstorm Force Presto PlayerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Presto Player presto-player… | |
| CVE-2026-105874 | 14 Oct 2026 | CVSS 7.1 | Brainstorm Force SureCartImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows… | |
| CVE-2026-106599 | 14 Oct 2026 | CVSS 8.8 | Brainstorm Force SureCartDeserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a… | |
| CVE-2026-109697 | 13 Oct 2026 | CVSS 6.5 | Brainstorm Force SureCartImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows… | |
| CVE-2026-108495 | 13 Oct 2026 | CVSS 6.5 | Brainstorm Force SureFormsImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureForms sureforms allows… | |
| CVE-2026-39721 | 5 Oct 2026 | CVSS 5.4 | Brainstorm Force Starter TemplatesMissing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-102914 | 5 Oct 2026 | CVSS 6.5 | Brainstorm Force Presto PlayerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Presto Player presto-player… | |
| CVE-2026-102393 | 5 Oct 2026 | CVSS 6.5 | Brainstorm Force Starter TemplatesImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Starter Templates astra-sites… | |
| CVE-2026-96837 | 30 Sep 2026 | CVSS 8.8 | Brainstorm Force CartFlowsContributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions. | |
| CVE-2026-27085 | 30 Sep 2026 | CVSS 2.7 | Brainstorm Force Astra WordPress ThemeShop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions. | |
| CVE-2026-87741 | 28 Sep 2026 | CVSS 8.8 | Brainstorm Force ConvertPlusThe ConvertPlus plugin for WordPress is vulnerable to Deserialization of Untrusted Data in all versions up to, and including, 3.6.3 via the style… |