Skip to content
OpenAdvisories

Product · Brainstorm Force

SureForms

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-120842

    WordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureForms: from n/a through 2.13.0.

    Brainstorm Force SureForms
  • Medium 5.3
    CVE-2026-116387

    WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureForms: from n/a through 2.12.9.

    Brainstorm Force SureForms
  • Medium 5.3
    CVE-2026-116402

    WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force SureForms sureforms allows Code Injection.This issue affects SureForms: from n/a through 2.12.9.

    Brainstorm Force SureForms
  • Medium 6.5
    CVE-2026-108495

    WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureForms sureforms allows Stored XSS.This issue affects SureForms: from n/a through 2.12.7.

    Brainstorm Force SureForms
  • Medium 5.3
    CVE-2026-85308

    WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms: from n/a through 2.12.5.

    Brainstorm Force SureForms