Skip to content
OpenAdvisories

Product · Brainstorm Force

CartFlows

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-120853

    WordPress CartFlows plugin <= 3.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through 3.3.0.

    Brainstorm Force CartFlows
  • Medium 5.3
    CVE-2026-120852

    WordPress CartFlows plugin <= 3.3.0 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force CartFlows cartflows allows Code Injection.This issue affects CartFlows: from n/a through 3.3.0.

    Brainstorm Force CartFlows
  • Medium 4.3
    CVE-2026-39477

    WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through <= 2.2.3.

    Brainstorm Force CartFlows