Vulnerability index

Browse CVEs

66 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Sureforms MEDIUM 5.8
CVE-2025-5921

The SureForms WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C…

Fix: 1.7.2+
Fix from $1,600 2025-08-01
Sureforms HIGH 7.5
CVE-2025-6742

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and includ…

Fix: 0.0.14 / 1.0.7+
Fix from $1,950 2025-07-09
Sureforms HIGH 8.1
CVE-2025-6691

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path …

Fix: 0.0.14 / 1.0.7+
Fix from $1,950 2025-07-09
Sureforms MEDIUM 5.3
CVE-2024-12713

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and includ…

Fix: 1.2.3+
Fix from $1,600 2025-01-08
Astra Widgets MEDIUM 5.4
CVE-2024-56274

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Astra Widgets astra-widgets al…

Fix: 1.2.16+
Fix from $1,600 2025-01-07
Elementor Header \& Footer Builder MEDIUM 5.4
CVE-2024-11230

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘size’ parameter in all versions up t…

Fix: after 1.6.46
Fix from $1,600 2024-12-23
Spectra CRITICAL 9.8
CVE-2023-23834

Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

Fix: 2.3.1+
Fix from $2,300 2024-12-09
Spectra HIGH 8.8
CVE-2023-23825

Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

Fix: 2.3.1+
Fix from $1,950 2024-12-09
Spectra MEDIUM 5.4
CVE-2024-10484

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Team' widget in all vers…

Fix: 2.16.3+
Fix from $1,600 2024-12-03
Elementor Header \& Footer Builder MEDIUM 5.4
CVE-2024-10325

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions…

Fix: 1.6.46+
Fix from $1,600 2024-11-08
Spectra HIGH 8.8
CVE-2024-37517

Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

Fix: 2.13.8+
Fix from $1,950 2024-11-01
Astra Widgets MEDIUM 5.4
CVE-2024-50439

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Astra Widgets astra-widgets al…

Fix: 1.2.15+
Fix from $1,600 2024-10-28
Spectra MEDIUM 5.4
CVE-2024-7590

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectra ultimate-addons-for-gu…

Fix: after 2.14.1
Fix from $1,600 2024-08-12
Ultimate Addons For Beaver Builder MEDIUM 5.4
CVE-2024-43151

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Bea…

Fix: 1.5.10+
Fix from $1,600 2024-08-12
Elementor Header\, Footer \& Blocks Template MEDIUM 5.4
CVE-2024-33933

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force, Nikhil Chavan Elemento…

Fix: 1.6.36+
Fix from $1,600 2024-07-22
Cards For Beaver Builder MEDIUM 5.4
CVE-2024-37278

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pratik Chaskar Cards for Beaver Builder.…

Fix: 1.1.5+
Fix from $1,600 2024-07-22
Ultimate Addons For Wpbakery Page Builder MEDIUM 5.4
CVE-2024-5255

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_dual_color shortcode in …

Fix: 3.19.20.1+
Fix from $1,600 2024-07-17
Ultimate Addons For Wpbakery Page Builder MEDIUM 5.4
CVE-2024-5251

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_pricing shortcode in al…

Fix: 3.19.20.1+
Fix from $1,600 2024-07-17
Ultimate Addons For Wpbakery Page Builder MEDIUM 5.4
CVE-2024-5252

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_info_table shortcode in …

Fix: 3.19.20.1+
Fix from $1,600 2024-07-17
Ultimate Addons For Wpbakery Page Builder MEDIUM 5.4
CVE-2024-5253

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ult_team shortcode in all version…

Fix: 3.19.20.1+
Fix from $1,600 2024-07-17
Ultimate Addons For Wpbakery Page Builder MEDIUM 5.4
CVE-2024-5254

The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_info_banner shortcode in…

Fix: 3.19.20.1+
Fix from $1,600 2024-07-17
Ultimate Addons For Elementor HIGH 8.8
CVE-2024-37455

Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege Escalation.This issue affects Ultimate…

Fix: 1.36.32+
Fix from $1,950 2024-07-09
Convert Pro CRITICAL 9.8
CVE-2023-36684

Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a through 1.7.5.

Fix: 1.7.6+
Fix from $2,300 2024-06-19
Spectra HIGH 8.8
CVE-2023-36676

Missing Authorization vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6.

Fix: 2.6.7+
Fix from $1,950 2024-06-19
Starter Templates MEDIUM 6.5
CVE-2023-41805

Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects …

Fix: 3.2.6+
Fix from $1,600 2024-06-19
Astra HIGH 8.8
CVE-2023-44148

Missing Authorization vulnerability in Brainstorm Force Astra Bulk Edit.This issue affects Astra Bulk Edit: from n/a through 1.2.7.

Fix: 1.2.8+
Fix from $1,950 2024-06-19
Pre Publish Checklist HIGH 8.8
CVE-2023-44151

Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1.

Fix: 1.1.2+
Fix from $1,950 2024-06-19
Elementor Header\, Footer \& Blocks Template MEDIUM 5.4
CVE-2024-5757

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url attribute within the plugin's Si…

Fix: 1.6.36+
Fix from $1,600 2024-06-13
Spectra MEDIUM 6.1
CVE-2023-23735

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force Spectra allows Code Injection.This is…

Fix: 2.3.1+
Fix from $1,600 2024-06-03
Spectra MEDIUM 5.3
CVE-2023-23738

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Brainstorm Force Spectra allows C…

Fix: 2.3.1+
Fix from $1,600 2024-06-03