Skip to content
OpenAdvisories

Vendor

Brainstorm Force

169 known vulnerabilities.

Products

Ultimate Addons for Elementor 13 Spectra 13 Spectra Gutenberg Blocks – Website Builder for the Block Editor 11 SureDash 11 SureCart 8 Ultimate Addons for Beaver Builder – Lite 7 SureForms – Contact Form, Payment Form & Other Custom Form Builder 7 Starter Templates 7 SureForms 6 Ultimate Addons for WPBakery Page Builder 6 Ultimate Addons for WPBakery 6 OttoKit 5 CartFlows 5 ConvertPlus 5 SureDash – Community, Courses & Member Dashboard 4 Spectra Legacy – Gutenberg Blocks 3 Astra 3 CartFlows – Funnel Builder & Checkout Plugin for WooCommerce 3 Starter Templates – AI-Powered Templates for Elementor & Gutenberg 3 Astra Widgets 3 Presto Player 3 Astra Bulk Edit 2 SureForms – Drag and Drop Form Builder for WordPress 2 Premium Starter Templates 2 Starter Templates — Elementor, WordPress & Beaver Builder Templates 2 Spectra Pro 2 SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz 2 Custom Fonts – Host Your Fonts Locally 2 SureRank 2 Ultimate Addons for Beaver Builder 2 OttoKit: All-in-One Automation Platform 2 Ultimate Addons for Elementor - Lite 1 ProjectHuddle Client Site 1 Starter Templates — Elementor, Gutenberg & Beaver Builder Templates 1 SureMembers 1 Sigmize 1 Astra Pro 1 SureFeedback Client Site 1 SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers 1 SureForms Pro 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-112241

    WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability

    Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5.

    Brainstorm Force SureCart
  • Critical 9.8
    CVE-2026-110372 Scanner template

    WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40.

    Brainstorm Force OttoKit
  • Critical 9.9
    CVE-2026-57401

    WordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force SureDash suredash allows Path Traversal.This issue affects SureDash: from n/a through <= 1.8.0.

    Brainstorm Force SureDash
  • Critical 9.8
    CVE-2026-49781

    WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions.

    Brainstorm Force OttoKit
  • Critical 9.3
    CVE-2026-9065

    Surecart - SQL Injection

    SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameters ('model_name', 'model_id', 'integration_id', 'provider') on the REST API endpoint '/surecart/v1/integrations/{id}'. The root cause is a flawed escaping bypas…

    Brainstorm Force SureCart
  • Critical 9.8
    CVE-2025-27007 Public exploit Scanner template EPSS 54%

    WordPress SureTriggers <= 1.0.82 - Privilege Escalation Vulnerability

    Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through <= 1.0.82.

    Brainstorm Force OttoKit
  • Critical 9.9
    CVE-2023-49830

    WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)

    Improper Control of Generation of Code ('Code Injection') vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1.

    Brainstorm Force Astra Pro