Brainstorm Force vulnerabilities
97 published CVEs name Brainstorm Force among the affected products.
- Published CVEs
- 97
- Last 12 months
- 47
- Critical
- 6
- Known exploited
- 0
Critical 6High 27Medium 62Low 2Not scored 0
CVEs per yearBy the year they were published
- 20237
- 202435
- 202511
- 202644
Newest CVEs
- CVE-2026-115604
WordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerability
Brainstorm Force · SureDash
Medium5.0 - CVE-2026-39739
WordPress Ultimate Addons for Elementor - Lite plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerability
Brainstorm Force · Ultimate Addons for Elementor - Lite
Medium6.5 - CVE-2026-115605
WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerability
Brainstorm Force · SureDash
Medium4.3 - CVE-2026-110881
WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerability
Brainstorm Force · SureDash
Medium6.5 - CVE-2026-116387
WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability
Brainstorm Force · SureForms
Medium5.3 - CVE-2026-116402
WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability
Brainstorm Force · SureForms
Medium5.3 - CVE-2026-110892
WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
Brainstorm Force · SureDash
Medium6.5 - CVE-2026-112241
WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability
Brainstorm Force · SureCart
Critical9.8 - CVE-2026-110893
WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
Brainstorm Force · SureDash
Medium5.3 - CVE-2026-110894
WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
Brainstorm Force · SureDash
Medium5.3
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)33
- CWE-862 Missing authorization25
- CWE-502 Deserialization of untrusted data5
- CWE-22 Path traversal4
- CWE-266 4
- CWE-269 Improper privilege management4
- CWE-352 Cross-site request forgery (CSRF)4
- CWE-918 Server-side request forgery (SSRF)4
- CWE-80 Basic cross-site scripting3
- CWE-639 Authorization bypass through a user-controlled key (IDOR)2