255 matches found
Code injection
Improper Control of Generation of Code 'Code Injection' vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1...
CVE-2023-49830
CVE-2023-49830 concerns Brainstorm Force Astra Pro Addon (vulnerable: Astra Pro
PT-2023-31806 · Brainstorm Force · Wp Remote Site Search
Name of the Vulnerable Software and Affected Versions: Brainstorm Force WP Remote Site Search versions 1.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that...
CVE-2023-49833
CVE-2023-49833 (Spectra – WordPress Gutenberg Blocks) is a stored XSS in Spectra up to v2.7.9 caused by improper neutralization of input during web page generation. Affected product: Spectra (Ultimate Addons for Gutenberg) for WordPress; vulnerability requires authenticated access (Contributor+)....
CVE-2023-49833 WordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Spectra – WordPress Gutenberg Blocks allows Stored XSS.This issue affects Spectra – WordPress Gutenberg Blocks: from n/a through 2.7.9...
CVE-2023-49833 WordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Spectra – WordPress Gutenberg Blocks allows Stored XSS.This issue affects Spectra – WordPress Gutenberg Blocks: from n/a through 2.7.9...
CVE-2023-41804
Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4...
CVE-2023-41804 WordPress Starter Templates Plugin <= 3.2.4 is vulnerable to Server Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4...
CVE-2023-41804
The CVE-2023-41804 entry relates to a Server-Side Request Forgery (SSRF) in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates (Starter Templates) affecting versions up to 3.2.4. Connected sources corroborate a likely SSRF vulnerability in the WordPress Starter T...
CVE-2023-36685
Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force US LLC CartFlows Pro allows Cross Site Request Forgery.This issue affects CartFlows Pro: from n/a through 1.11.12...
CVE-2023-36685
Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force US LLC CartFlows Pro allows Cross Site Request Forgery.This issue affects CartFlows Pro: from n/a through 1.11.12...
CVE-2023-36682
Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force US LLC Schema Pro allows Cross Site Request Forgery.This issue affects Schema Pro: from n/a through 2.7.7...
CVE-2023-36682
Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force US LLC Schema Pro allows Cross Site Request Forgery.This issue affects Schema Pro: from n/a through 2.7.7...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force US LLC Schema Pro allows Cross Site Request Forgery.This issue affects Schema Pro: from n/a through 2.7.7...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Brainstorm Force US LLC CartFlows Pro allows Cross Site Request Forgery.This issue affects CartFlows Pro: from n/a through 1.11.12...
CVE-2023-36682
Technical details about CVE-2023-36682 are not provided in the connected documents. Monitor vendor advisories for patch status and mitigations; initial description notes a CSRF issue in Schema Pro up to version 2.7.7.
CVE-2023-36685
CVE-2023-36685 – CartFlows Pro CSRF (WordPress) A CSRF vulnerability exists in Brainstorm Force US LLC CartFlows Pro插件, affecting CartFlows Pro versions up to 1.11.12. The CVE indicates unauthenticated CSRF could impact users, with high impact on confidentiality, integrity, and availability per N...