Skip to content
OpenAdvisories

Vendor

faridsaniee

2 known vulnerabilities.

Products

OPEN-BRAIN 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-3995

    OPEN-BRAIN <= 0.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'API Key' Setting

    The OPEN-BRAIN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'API Key' settings field in all versions up to, and including, 0.5.0. This is due to insufficient input sanitization and output escaping. The plugin uses sanitize_text_fi…

    faridsaniee OPEN-BRAIN Web / CMS
  • Medium 6.1
    CVE-2026-4091

    OPEN-BRAIN <= 0.5.0 - Cross-Site Request Forgery

    The OPEN-BRAIN plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.0. This is due to missing nonce verification on the settings form in the func_page_main() function. This makes it possible for unauthenti…

    faridsaniee OPEN-BRAIN Web / CMS