SureForms
Brainstorm Force
Developer
2.13.0
Latest version
500,000
Installations
No date
Last updated
Vulnerability history
0 present
22 patched
6 Mitigation rules
- Broken Access Control vulnerability<= 2.12.96 days ago
- Content Injection vulnerability<= 2.12.96 days ago
- Cross Site Scripting (XSS) vulnerability<= 2.12.713/10/2026
- Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload vulnerability<= 2.12.207/09/2026
- Insecure Direct Object References (IDOR) vulnerability<= 2.12.503/09/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.8.131/07/2026
- Broken Access Control vulnerability<= 2.2.117/07/2026
- Unauthenticated Payment Amount Validation Bypass via 'form_id' vulnerability<= 2.5.230/03/2026
- WordPress SureForms - Drag and Drop Form Builder for WordPress plugin <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulation vulnerability<= 2.2.115/02/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 2.2.031/12/2025
- Admin+ Stored XSS vulnerability< 1.4.431/12/2025
- Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution vulnerability<= 1.13.118/11/2025
- Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability<= 1.13.112/11/2025
- Missing Authorization to Authenticated (Contributor+) Information Disclosure vulnerability<= 1.12.113/10/2025
- Admin+ Stored XSS vulnerability< 1.9.123/09/2025
- Missing Authorization to Authenticated (Contributor+) Form Creation vulnerability<= 1.12.020/09/2025
- Reflected XSS vulnerability< 1.7.221/07/2025
- Unauthenticated PHP Object Injection (PHAR) vulnerability<= 1.7.308/07/2025
- Unauthenticated Arbitrary File Deletion<= 1.7.301/07/2025
- Admin+ Stored XSS vulnerability< 1.4.402/05/2025
- Contributor+ Settings Update vulnerability< 1.4.430/04/2025
- Missing Authorization to Unauthenticated Protected Post Disclosure vulnerability<= 1.2.207/01/2025