Browse CVEs

MEDIUM 5.8 CVE-2025-5921 The SureForms WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C… Sureforms 1.7.2+ Fix from $1,6002025-08-01 HIGH 7.5 CVE-2025-6742 The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and includ… Sureforms 0.0.14 / 1.0.7+ Fix from $1,9502025-07-09 HIGH 8.1 CVE-2025-6691 The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path … Sureforms 0.0.14 / 1.0.7+ Fix from $1,9502025-07-09 MEDIUM 5.3 CVE-2024-12713 The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and includ… Sureforms 1.2.3+ Fix from $1,6002025-01-08 MEDIUM 5.4 CVE-2024-56274 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Astra Widgets astra-widgets al… Astra Widgets 1.2.16+ Fix from $1,6002025-01-07 MEDIUM 5.4 CVE-2024-11230 The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘size’ parameter in all versions up t… Elementor Header \& Footer Builder after 1.6.46 Fix from $1,6002024-12-23 CRITICAL 9.8 CVE-2023-23834 Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… Spectra 2.3.1+ Fix from $2,3002024-12-09 HIGH 8.8 CVE-2023-23825 Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… Spectra 2.3.1+ Fix from $1,9502024-12-09 MEDIUM 5.4 CVE-2024-10484 The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Team' widget in all vers… Spectra 2.16.3+ Fix from $1,6002024-12-03 MEDIUM 5.4 CVE-2024-10325 The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all versions… Elementor Header \& Footer Builder 1.6.46+ Fix from $1,6002024-11-08 HIGH 8.8 CVE-2024-37517 Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… Spectra 2.13.8+ Fix from $1,9502024-11-01 MEDIUM 5.4 CVE-2024-50439 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Astra Widgets astra-widgets al… Astra Widgets 1.2.15+ Fix from $1,6002024-10-28 MEDIUM 5.4 CVE-2024-7590 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectra ultimate-addons-for-gu… Spectra after 2.14.1 Fix from $1,6002024-08-12 MEDIUM 5.4 CVE-2024-43151 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Bea… Ultimate Addons For Beaver Builder 1.5.10+ Fix from $1,6002024-08-12 MEDIUM 5.4 CVE-2024-33933 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm Force, Nikhil Chavan Elemento… Elementor Header\, Footer \& Blocks Template 1.6.36+ Fix from $1,6002024-07-22 MEDIUM 5.4 CVE-2024-37278 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pratik Chaskar Cards for Beaver Builder.… Cards For Beaver Builder 1.1.5+ Fix from $1,6002024-07-22 MEDIUM 5.4 CVE-2024-5255 The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_dual_color shortcode in … Ultimate Addons For Wpbakery Page Builder 3.19.20.1+ Fix from $1,6002024-07-17 MEDIUM 5.4 CVE-2024-5251 The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_pricing shortcode in al… Ultimate Addons For Wpbakery Page Builder 3.19.20.1+ Fix from $1,6002024-07-17 MEDIUM 5.4 CVE-2024-5252 The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_info_table shortcode in … Ultimate Addons For Wpbakery Page Builder 3.19.20.1+ Fix from $1,6002024-07-17 MEDIUM 5.4 CVE-2024-5253 The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ult_team shortcode in all version… Ultimate Addons For Wpbakery Page Builder 3.19.20.1+ Fix from $1,6002024-07-17 MEDIUM 5.4 CVE-2024-5254 The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ultimate_info_banner shortcode in… Ultimate Addons For Wpbakery Page Builder 3.19.20.1+ Fix from $1,6002024-07-17 HIGH 8.8 CVE-2024-37455 Improper Privilege Management vulnerability in Brainstorm Force Ultimate Addons for Elementor allows Privilege Escalation.This issue affects Ultimate… Ultimate Addons For Elementor 1.36.32+ Fix from $1,9502024-07-09 CRITICAL 9.8 CVE-2023-36684 Missing Authorization vulnerability in Brainstorm Force Convert Pro.This issue affects Convert Pro: from n/a through 1.7.5. Convert Pro 1.7.6+ Fix from $2,3002024-06-19 HIGH 8.8 CVE-2023-36676 Missing Authorization vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6. Spectra 2.6.7+ Fix from $1,9502024-06-19 MEDIUM 6.5 CVE-2023-41805 Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects … Starter Templates 3.2.6+ Fix from $1,6002024-06-19 HIGH 8.8 CVE-2023-44148 Missing Authorization vulnerability in Brainstorm Force Astra Bulk Edit.This issue affects Astra Bulk Edit: from n/a through 1.2.7. Astra 1.2.8+ Fix from $1,9502024-06-19 HIGH 8.8 CVE-2023-44151 Missing Authorization vulnerability in Brainstorm Force Pre-Publish Checklist.This issue affects Pre-Publish Checklist: from n/a through 1.1.1. Pre Publish Checklist 1.1.2+ Fix from $1,9502024-06-19 MEDIUM 5.4 CVE-2024-5757 The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url attribute within the plugin's Si… Elementor Header\, Footer \& Blocks Template 1.6.36+ Fix from $1,6002024-06-13 MEDIUM 6.1 CVE-2023-23735 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force Spectra allows Code Injection.This is… Spectra 2.3.1+ Fix from $1,6002024-06-03 MEDIUM 5.3 CVE-2023-23738 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Brainstorm Force Spectra allows C… Spectra 2.3.1+ Fix from $1,6002024-06-03