Brainstorm Force

Records182All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high47CVSS 7.0–8.9

Exploited now

Brainstorm Force records in CISA KEV

No Brainstorm Force vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Spectra 18 records MEDIUM Ultimate Addons For Beaver Builder 9 records MEDIUM Elementor Header & Footer Builder 7 records LOW Sureforms 7 records MEDIUM Ultimate Addons For Wpbakery Page Builder 7 records LOW Schema 4 records MEDIUM Starter Templates 4 records LOW Astra 3 records MEDIUM

Records

4 records in Schema · all components

TI-2024-01460 CVE-2024-1564 · GHSA-p8fm-626m-mf8v

Schema Pro < 2.7.16 - Contributor+ Custom Field Access

MEDIUM 53

The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00453 Published 2024-03-25 Fixed in 2.7.16

TI-2023-18497 CVE-2023-36682 · GHSA-vgj7-f7pg-mh5x

WordPress Schema Pro Plugin <= 2.7.7 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force US LLC Schema Pro allows Cross Site Request Forgery.This issue affects Schema Pro: from n/a through 2.7.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00297 Published 2023-11-30 No fix listed CWE-352

TI-2023-10530 CVE-2023-25058 · GHSA-995c-f6hq-jmwp

WordPress Schema – All In One Schema Rich Snippets Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Schema – All In One Schema Rich Snippets plugin <= 1.6.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-26 No fix listed CWE-352

TI-2018-14939 CVE-2018-20977 · GHSA-7888-6r8j-m965

The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.

LOW 29

The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00897 Published 2019-08-21 No fix listed CWE-79

Open these records in search →

Critical	10
High	47
Medium	122
Low	3
No CVSS	0