Read the docs

Brainstorm Force

Records182All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high47CVSS 7.0–8.9

Exploited now

Brainstorm Force records in CISA KEV

No Brainstorm Force vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Spectra 18 records MEDIUM Ultimate Addons For Beaver Builder 9 records MEDIUM Elementor Header & Footer Builder 7 records LOW Sureforms 7 records MEDIUM Ultimate Addons For Wpbakery Page Builder 7 records LOW Schema 4 records MEDIUM Starter Templates 4 records LOW Astra 3 records MEDIUM

Records

7 records in Ultimate Addons For Wpbakery Page Builder · all components

TI-2023-28056 CVE-2023-51402 · GHSA-5r5q-x8qc-h6m8

WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)

Priority LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in Brain Storm Force Ultimate Addons for WPBakery Page Builder.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through 3.19.17.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00222 Published 2023-12-29 No fix listed CWE-352
TI-2024-04876 CVE-2024-5252 · GHSA-x9px-jpvw-739v

Cross-site scripting in Brainstorm Force Ultimate Addons for WPBakery

Priority LOW 30

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_info_table shortcode in all versions up to, and including, 3.19.20 due to insufficient input sa…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00295 Published 2024-07-17 No fix listed CWE-79
TI-2024-04879 CVE-2024-5255 · GHSA-6cq4-fw23-j7vw

Cross-site scripting in Brainstorm Force Ultimate Addons for WPBakery

Priority LOW 28

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_dual_color shortcode in all versions up to, and including, 3.19.20 due to insufficient input sa…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00295 Published 2024-07-17 No fix listed CWE-79
TI-2024-04878 CVE-2024-5254 · GHSA-777h-w3w2-h4q5

Cross-site scripting in Brainstorm Force Ultimate Addons for WPBakery

Priority LOW 28

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_info_banner shortcode in all versions up to, and including, 3.19.20 due to insufficient input s…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00295 Published 2024-07-17 No fix listed CWE-79
TI-2024-04877 CVE-2024-5253 · GHSA-jx8h-rc52-2jx8

Cross-site scripting in Brainstorm Force Ultimate Addons for WPBakery

Priority LOW 28

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ult_team shortcode in all versions up to, and including, 3.19.20 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00295 Published 2024-07-17 No fix listed CWE-79
TI-2024-04875 CVE-2024-5251 · GHSA-m5m5-h3mf-ph9j

Cross-site scripting in Brainstorm Force Ultimate Addons for WPBakery

Priority LOW 28

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_pricing shortcode in all versions up to, and including, 3.19.20 due to insufficient input sanit…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00295 Published 2024-07-17 No fix listed CWE-79
Open these records in search →