Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Brainstorm Force Component: Starter Templates Clear all filters
TI-2023-22204 CVE-2023-41805 · GHSA-x36f-p8vg-f8r8

Broken Access Control vulnerability in multiple Brainstorm Force plugins

Priority LOW 29

Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects Premium Starter Templates: from n/a through 3.2.5; Starter Templates: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00399 Published 2024-06-19 No fix listed CWE-862
TI-2023-22203 CVE-2023-41804 · GHSA-59fr-vm6h-jf4m

WordPress Starter Templates Plugin <= 3.2.4 is vulnerable to Server Side Request Forgery (SSRF)

Priority LOW 31

Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templa…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00403 Published 2023-12-07 No fix listed CWE-918
TI-2021-18776 CVE-2021-42360 · GHSA-w3jq-67c5-3rfj

Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 Authenticated Block Import to Stored XSS

Priority LOW 34

On sites that also had the Elementor plugin for WordPress installed, it was possible for users with the edit_posts capability, which includes Contributor-level users, to import blocks onto any page using the astra-page-e…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00604 Published 2021-11-17 No fix listed CWE-284