255 matches found
CVE-2023-36679
Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6...
CVE-2023-36679
Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6...
CVE-2023-34370
Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premiu...
CVE-2023-34370
CVE-2023-34370 is a Server-Side Request Forgery (SSRF) vulnerability affecting Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates and Brainstorm Force Premium Starter Templates up to version 3.2.4. The cited sources identify the root cause as SSRF and indicate af...
CVE-2023-34370 Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins
Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premiu...
CVE-2023-34370 Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins
Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates, Brainstorm Force Premium Starter Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4; Premiu...
CVE-2023-36679 WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6...
CVE-2023-36679 WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6...
CVE-2024-29768
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra allows Stored XSS.This issue affects Astra: from n/a through 4.6.4...
CVE-2024-29768 WordPress Astra theme <= 4.6.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra allows Stored XSS.This issue affects Astra: from n/a through 4.6.4...
CVE-2024-29768
CVE-2024-29768 : Stored XSS in Astra (Brainstorm Force) affecting versions up to 4.6.4. Root cause: improper neutralization of input during web page generation. Public details confirm the vulnerability; no remediation/version fix is specified in the provided documents.
PT-2024-12475 · Elementor +2 · Elementor +3
Name of the Vulnerable Software and Affected Versions: Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates versions 3.2.4 and earlier Brainstorm Force Premium Starter Templates versions 3.2.4 and earlier Description: A Server-Side Request Forgery SSRF issue affect...
CVE-2023-23882
Missing Authorization vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.5...
CVE-2023-23882
The CVE-2023-23882 entry refers to a Missing Authorization (Broken Access Control) vulnerability in WordPress Ultimate Addons for Beaver Builder – Lite. According to Patchstack (and other connected entries), affected versions are Ultimate Addons for Beaver Builder – Lite 1.5.5 (i.e., 1.5.6 or ne...
CVE-2023-23882 WordPress Ultimate Addons for Beaver Builder – Lite Plugin <= 1.5.5 is vulnerable to Broken Access Control
Missing Authorization vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite.This issue affects Ultimate Addons for Beaver Builder – Lite: from n/a through 1.5.5...
CVE-2023-51397
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force WP Remote Site Search allows Stored XSS.This issue affects WP Remote Site Search: from n/a through 1.0.4...
CVE-2023-51397
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force WP Remote Site Search allows Stored XSS.This issue affects WP Remote Site Search: from n/a through 1.0.4...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force WP Remote Site Search allows Stored XSS.This issue affects WP Remote Site Search: from n/a through 1.0.4...
CVE-2023-51397
CVE-2023-51397 affects WP Remote Site Search (Brainstorm Force) up to version 1.0.4. It is a Stored XSS caused by improper input neutralization during web page generation, requiring authentication. The vulnerability is documented as patched per publicly available sources; remediation is to use a ...