brainstormforce vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20235
3. 202425
4. 202514
5. 202617

Newest CVEs

• CVE-2026-92294

  Spectra Gutenberg Blocks <= 2.20.4 - Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification via 'page', 'path', and 'settings' GET Parameters

  brainstormforce · Spectra Legacy – Gutenberg Blocks

  Medium6.5
• CVE-2026-96870

  SureDash <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter

  brainstormforce · SureDash – Community, Courses & Member Dashboard

  Medium6.4
• CVE-2026-102774

  SureDash <= 1.12.1 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content

  brainstormforce · SureDash – Community, Courses & Member Dashboard

  Medium6.4
• CVE-2026-16302

  Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure

  brainstormforce · Spectra Legacy – Gutenberg Blocks

  Medium4.3
• CVE-2026-18406

  SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload

  brainstormforce · SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

  High7.2
• CVE-2026-18402

  SureDash <= 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute

  brainstormforce · SureDash – Community, Courses & Member Dashboard

  Medium6.4
• CVE-2026-7623

  SureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block Attribute

  brainstormforce · SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

  Medium6.4
• CVE-2026-15821

  SureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

  brainstormforce · SureDash – Community, Courses & Member Dashboard

  Medium6.4
• CVE-2026-15787

  Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes

  brainstormforce · Ultimate Addons for Elementor

  Medium6.4
• CVE-2026-12900

  Spectra Gutenberg Blocks <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via uagb/image Block

  brainstormforce · Spectra Legacy – Gutenberg Blocks

  Medium6.4