Brainstorm Force ConvertPlus vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20251
3. 20261

Newest CVEs

• CVE-2026-87741

  ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameter

  Brainstorm Force · ConvertPlus

  High8.8
• CVE-2024-13800

  Popup Plugin For WordPress - ConvertPlus <= 3.5.30 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

  Brainstorm Force · ConvertPlus

  High8.1
• CVE-2024-4838

  ConvertPlus <= 3.5.26 - Authenticated (Contributor+) PHP Object Injection

  Brainstorm Force · ConvertPlus

  High7.5
• CVE-2024-3240

  ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection

  Brainstorm Force · ConvertPlus

  High8.8
• CVE-2024-3237

  ConvertPlug <= 3.5.25 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update

  Brainstorm Force · ConvertPlus

  Medium5.4