Skip to content
OpenAdvisories

Vendor

brainstormforce

62 known vulnerabilities.

Products

Spectra Gutenberg Blocks – Website Builder for the Block Editor 11 Ultimate Addons for Elementor 10 SureForms – Contact Form, Payment Form & Other Custom Form Builder 7 Ultimate Addons for Beaver Builder – Lite 5 SureDash – Community, Courses & Member Dashboard 4 Spectra Legacy – Gutenberg Blocks 3 CartFlows – Funnel Builder & Checkout Plugin for WooCommerce 3 Starter Templates – AI-Powered Templates for Elementor & Gutenberg 3 SureForms – Drag and Drop Form Builder for WordPress 2 SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz 2 Astra 2 Custom Fonts – Host Your Fonts Locally 2 OttoKit: All-in-One Automation Platform 2 Starter Templates — Elementor, Gutenberg & Beaver Builder Templates 1 SureMail – SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers 1 Lightweight Sidebar Manager 1 Import / Export Customizer Settings 1 SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator 1 Surecart 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-7465 Public exploit

    Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

    The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-level access an…

    brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor Web / CMS
  • High 7.2
    CVE-2025-14855 Public exploit

    SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting

    The SureForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form field parameters in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated at…

    brainstormforce SureForms – Contact Form, Payment Form & Other Custom Form Builder Web / CMS
  • High 8.1
    CVE-2025-3102 Public exploit EPSS 76%

    SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

    The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secret_key' value in the 'autheticate_user' function in all v…

    brainstormforce OttoKit: All-in-One Automation Platform Web / CMS