SureForms
Brainstorm Force
Developer
2.7.1
Latest version
500,000
Installations
No date
Last updated
Vulnerability history
0 present
15 patched
5 Mitigation rules
- Unauthenticated Payment Amount Validation Bypass via 'form_id' vulnerability<= 2.5.230/03/2026
- WordPress SureForms - Drag and Drop Form Builder for WordPress plugin <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulation vulnerability<= 2.2.115/02/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 2.2.031/12/2025
- Admin+ Stored XSS vulnerability< 1.4.431/12/2025
- Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution vulnerability<= 1.13.118/11/2025
- Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability<= 1.13.112/11/2025
- Missing Authorization to Authenticated (Contributor+) Information Disclosure vulnerability<= 1.12.113/10/2025
- Admin+ Stored XSS vulnerability< 1.9.123/09/2025
- Missing Authorization to Authenticated (Contributor+) Form Creation vulnerability<= 1.12.020/09/2025
- Reflected XSS vulnerability< 1.7.221/07/2025
- Unauthenticated PHP Object Injection (PHAR) vulnerability<= 1.7.308/07/2025
- Unauthenticated Arbitrary File Deletion<= 1.7.301/07/2025
- Admin+ Stored XSS vulnerability< 1.4.402/05/2025
- Contributor+ Settings Update vulnerability< 1.4.430/04/2025
- Missing Authorization to Unauthenticated Protected Post Disclosure vulnerability<= 1.2.207/01/2025