Skip to content
OpenAdvisories

Product · Brainstorm Force

CartFlows

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-96837

    WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability

    Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.

    Brainstorm Force CartFlows
  • High 7.2
    CVE-2026-25316

    WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Brainstorm Force CartFlows cartflows allows Object Injection.This issue affects CartFlows: from n/a through <= 2.1.19.

    Brainstorm Force CartFlows